Static task
static1
Behavioral task
behavioral1
Sample
b44c5efb6e0a3301d4fcf8d5ac27db1d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b44c5efb6e0a3301d4fcf8d5ac27db1d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b44c5efb6e0a3301d4fcf8d5ac27db1d_JaffaCakes118
-
Size
52KB
-
MD5
b44c5efb6e0a3301d4fcf8d5ac27db1d
-
SHA1
708a2d71f4e761610734ed89d392d03893029f10
-
SHA256
97931fddbad72385de24f6c8d3d3ad8634582c4fe51da15f2e292d00bf906eb8
-
SHA512
1736b8a8705c214996a714c5ea2e52de341cd8fdb6a25f7fa830f47d374de801d10502aaf0ac88b00c4a2411f900cb40381ae81b6625a79e9138ec846ce2396d
-
SSDEEP
1536:JXdPYO3wf2AZuqJmnL2np1ulpoyjHPCp5TWrBD:JXdwdfdEqsnUpkcQqpo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b44c5efb6e0a3301d4fcf8d5ac27db1d_JaffaCakes118
Files
-
b44c5efb6e0a3301d4fcf8d5ac27db1d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE