Static task
static1
Behavioral task
behavioral1
Sample
44e71fb189d328438e4ab75a3f3f7d7c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
44e71fb189d328438e4ab75a3f3f7d7c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
44e71fb189d328438e4ab75a3f3f7d7c_JaffaCakes118
-
Size
123KB
-
MD5
44e71fb189d328438e4ab75a3f3f7d7c
-
SHA1
7f203f8f30afc2eab99c9d9484be9e8e06c7ade0
-
SHA256
3037b1f139518b3cf72d039ac72b4d5a82eb247be0666cae9255bceca64aae42
-
SHA512
98e0fd27ffb96844e97f5c743270ff4b8817001cafb648ddb2596d57e079d699d166fb7f2319a8eebcb8f35c8e9b3d61131513cbdfeb8f52f41b6c364fa7a275
-
SSDEEP
3072:8/8eNzb3PMxwdikE5dTDev7mk1gHwavw8COmW0tGxvq3:80q0xwckCEi5Ht5U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44e71fb189d328438e4ab75a3f3f7d7c_JaffaCakes118
Files
-
44e71fb189d328438e4ab75a3f3f7d7c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 120KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 492B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE