Static task
static1
Behavioral task
behavioral1
Sample
044be095881fe1a3014f7d207160a478_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
044be095881fe1a3014f7d207160a478_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
044be095881fe1a3014f7d207160a478_JaffaCakes118
-
Size
16KB
-
MD5
044be095881fe1a3014f7d207160a478
-
SHA1
9fc948c99e9cd55caee029d9d8ccac1f1704f62b
-
SHA256
7a825162189e47962e643ac655a0970d60c222cbfbacded45b5e17c89a49c951
-
SHA512
14b934fd08a0c0a8f49b86d989cc452210949b7b2a27782e2da81b2dd806e7177e4a2377194786af77be4ad7178285ad801d2d4d0eebdd864f52532508f6eea5
-
SSDEEP
384:IAd6YYlkL74F987S5tIOZALu+d3Eb03k+FyXrWIqBj:VYlNFq7S58Lu+d73k+0XrWIa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 044be095881fe1a3014f7d207160a478_JaffaCakes118
Files
-
044be095881fe1a3014f7d207160a478_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE