Static task
static1
Behavioral task
behavioral1
Sample
a44f005a30b43787cb8f18ff45eea90d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a44f005a30b43787cb8f18ff45eea90d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a44f005a30b43787cb8f18ff45eea90d_JaffaCakes118
-
Size
273KB
-
MD5
a44f005a30b43787cb8f18ff45eea90d
-
SHA1
8da663cadbf60bd0f5b0640058785ad876d635ae
-
SHA256
39aa3048b34064cb54940e9a7b169f9c365360e51f1fa1dbb0711cd49e32b6e8
-
SHA512
d4daa84106d69e6e03fb5416d2ed57608cc52484eaff84fde104b2ded1eac13c96c95f2dcbb30c5cdbf35e94f48777315716284441eb3fac59d220637c079b2b
-
SSDEEP
6144:qRgeclvXPoBQfFMdqpk4fkIcKMsHleE8wUV2AvP1:qRgec9oiaIkXI/HCwa2y1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a44f005a30b43787cb8f18ff45eea90d_JaffaCakes118
Files
-
a44f005a30b43787cb8f18ff45eea90d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
pUyePIHQ Size: - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DM1w3ksF Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
e36DQAi0 Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Wl5SHsYM Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ahbQiogF Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
CERTIFICATE
-
DM1w3ksF
-
Wl5SHsYM
-
ahbQiogF
-
e36DQAi0