Static task
static1
Behavioral task
behavioral1
Sample
444f6f7525f2f92f88e54597ade9250f_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
444f6f7525f2f92f88e54597ade9250f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
444f6f7525f2f92f88e54597ade9250f_JaffaCakes118
-
Size
125KB
-
MD5
444f6f7525f2f92f88e54597ade9250f
-
SHA1
4ff45c067cedebdf89585520e504c9062c46cf0a
-
SHA256
a986af8aac1c60851b29cd37bedabf0f6630676059e9fc2f676cd52e8c1b8461
-
SHA512
9cfba211be208d63a48411f55223e32316e1745c1e7c0db3b5309db3cd8d15e4b8494f9d5dd800fbe2470cbc9cdfdcd3e388fc1d2b928776c43944d9b7508cd5
-
SSDEEP
3072:uRrpG+lC3n/RduLwHm5P7begphD8Tp0b4MtTh1yTp:u1I+IRduLV5PXegphxblBq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 444f6f7525f2f92f88e54597ade9250f_JaffaCakes118
Files
-
444f6f7525f2f92f88e54597ade9250f_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rawdat Size: 115KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 506B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE