Static task
static1
Behavioral task
behavioral1
Sample
44e10c2bece16d0e145c08e94547929f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
44e10c2bece16d0e145c08e94547929f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
44e10c2bece16d0e145c08e94547929f_JaffaCakes118
-
Size
813KB
-
MD5
44e10c2bece16d0e145c08e94547929f
-
SHA1
b9bb624c6467df19a9afabe54c8c61f41ed99328
-
SHA256
10e5838ff99d59664fa20d1f21c1cede9dcb3be49b0b2e6ca132a70a07a46965
-
SHA512
c172d1c3aeb13a105bcde94848eccd40a7bc6df447f43fd8dca0a787890fe4066b03f282094887fba471036910c1a8601169fb52f527d9373669bfbee54cf901
-
SSDEEP
24576:Kveh0WuX3ZKXJrr186amIWgVRFyIMX5xv+ZXmRE43sd:Kk0/X3QsJJWgg5X5kxmRR8d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44e10c2bece16d0e145c08e94547929f_JaffaCakes118
Files
-
44e10c2bece16d0e145c08e94547929f_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE