Static task
static1
Behavioral task
behavioral1
Sample
044b4e8026de9eb67c30186b30ca4a7f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
044b4e8026de9eb67c30186b30ca4a7f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
044b4e8026de9eb67c30186b30ca4a7f_JaffaCakes118
-
Size
46KB
-
MD5
044b4e8026de9eb67c30186b30ca4a7f
-
SHA1
bd9a281616189b44b2e222e69b8ef111a39775b1
-
SHA256
0e5f1b5fbc6040a1fbb787e406a2f57422dc247a9f6a6aa82d89143ae9eb1876
-
SHA512
42f0f8a33b3b57ea832edcb23f9fde7b03c4e6d45b54c84f8b1539cbb3106e5c37d6b0be55734d7fdec20cf769f330881fb2383c19fceeafd8f6ff972511c9cc
-
SSDEEP
768:nWsyqAggDkPwj4LoT9m54Rkvh8pXtGYE/jmUcXpuCeTX/Eu7boCP9dP:WsyqFgD9j4LoT9LRkICkXcCeL/bfP9dP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 044b4e8026de9eb67c30186b30ca4a7f_JaffaCakes118
Files
-
044b4e8026de9eb67c30186b30ca4a7f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.petite Size: 5KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 33KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE