Static task
static1
Behavioral task
behavioral1
Sample
44f0193451f6f03f29bdd8c7cf7805f2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
44f0193451f6f03f29bdd8c7cf7805f2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
44f0193451f6f03f29bdd8c7cf7805f2_JaffaCakes118
-
Size
748KB
-
MD5
44f0193451f6f03f29bdd8c7cf7805f2
-
SHA1
faf0ff242af9bde73934ae16112dee044d37e8ca
-
SHA256
48877c632ae63e245153b0e25ea476f059c47a3e2d1e3f059816f51412674d6f
-
SHA512
62d667a1dd7634a1d9c5b5577731c18c49522f8b16ee3df66acbdbf25f7891fdb784f8448b32fffad7137b13531cb5e0b984172708e1eb3deb578be855fee558
-
SSDEEP
12288:y0RgCz9RXwPfH0+PZCgeokLzXWi2kF8qOQT0yO/IjSe/VZL9xviY1m5f+KrOPyef:ybCpRg5B0FfWi2kFD5jSmTL37o5f+yON
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44f0193451f6f03f29bdd8c7cf7805f2_JaffaCakes118
Files
-
44f0193451f6f03f29bdd8c7cf7805f2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
LR Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6sIL Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE