Static task
static1
Behavioral task
behavioral1
Sample
44fa740c6621dc89ff4892b905965cd0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
44fa740c6621dc89ff4892b905965cd0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
44fa740c6621dc89ff4892b905965cd0_JaffaCakes118
-
Size
26KB
-
MD5
44fa740c6621dc89ff4892b905965cd0
-
SHA1
f9f7aa2095938e17bab2efdacc17e953f07f8a8b
-
SHA256
14abf0ee99315d3d65837656d89e0bf9f0d3ed4601d690bc806d1d49c61f4a1a
-
SHA512
d356465302d146858bf3b4e302b567aaf97a4b5c8190ff51ddfecdcf096b90a9e5b5054adf6a74f3eeea5abe544a0d067d58443dd49b21e5e72dfa2d03caa450
-
SSDEEP
384:lpgw51q5HAkVwUd5xZjanBQe045FnRIe7NImB6hSdljhszRfpm5YM2uGrPQSVCng:DXQlXVzBumeDd7Mwd5hJ+03C3Afsk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44fa740c6621dc89ff4892b905965cd0_JaffaCakes118
Files
-
44fa740c6621dc89ff4892b905965cd0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE