Static task
static1
Behavioral task
behavioral1
Sample
44e334ca0d11a14ed80459bbdea99cc5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
44e334ca0d11a14ed80459bbdea99cc5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
44e334ca0d11a14ed80459bbdea99cc5_JaffaCakes118
-
Size
519KB
-
MD5
44e334ca0d11a14ed80459bbdea99cc5
-
SHA1
3fad9cc1882c03b6b147961b61684cf04add4372
-
SHA256
98f2cedb4ff54edc9e823c20f446220daddef44807ad7a03da8e0aa9d819c22f
-
SHA512
8003c3cc41bef4e7241427495bf5e2f604f6f6d6083969325f7c919bc929ed64bc39ae5d7553c6b28e853e6a6fef2d1beab0c4038cde9371d029b4bbb3132f8d
-
SSDEEP
12288:/GLEI1OCLmdk4rDKkDrv+KUxYvfB0jSjeOlBScToXr1:+LEjCLmq4rPvGxkJ7jrfYZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44e334ca0d11a14ed80459bbdea99cc5_JaffaCakes118
Files
-
44e334ca0d11a14ed80459bbdea99cc5_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.nos Size: - Virtual size: 244KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ