Static task
static1
Behavioral task
behavioral1
Sample
44e35bd5c4efef894b1551578a95c7c1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
44e35bd5c4efef894b1551578a95c7c1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
44e35bd5c4efef894b1551578a95c7c1_JaffaCakes118
-
Size
70KB
-
MD5
44e35bd5c4efef894b1551578a95c7c1
-
SHA1
738639c7ce7b1b8f172802e3cdab47fe314b6495
-
SHA256
72c913c3849d35bbb2646c9c597e902968fcb89ab2b9b185b4a505ffea4297c8
-
SHA512
efef0c7a49a129450cdc0128650480bee87b4d7950d744cd882235237dc24b38faa366ef908b6872a8503e74355a2a10b75ee67c6d6aac0a85f2fa72d972927f
-
SSDEEP
1536:TEyRDC2V4p3mGOKmJiKjiW9xcVvWbf1OuO9P2NpixeycKS:TEDNmp5MtuqP2Npixz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44e35bd5c4efef894b1551578a95c7c1_JaffaCakes118
Files
-
44e35bd5c4efef894b1551578a95c7c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
3e3ef1ae49696ec78ceead626add363e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
GetTickCount
lstrcmpiA
CreateFileA
CloseHandle
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
GetTickCount
lstrcmpiA
CreateFileA
CloseHandle
Sections
.text Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE