Static task
static1
Behavioral task
behavioral1
Sample
444ed4bb8e1631f1a2e9f4eb12bb00cc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
444ed4bb8e1631f1a2e9f4eb12bb00cc_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
444ed4bb8e1631f1a2e9f4eb12bb00cc_JaffaCakes118
-
Size
2.0MB
-
MD5
444ed4bb8e1631f1a2e9f4eb12bb00cc
-
SHA1
c809e1a28a82f8462e423b5e8c6bc1db075b59d1
-
SHA256
e1a08446ba8139f50f6123245ba1fbcd75ffaef2155b35adcb2c8a63cc1febf7
-
SHA512
c3e6b3c17d2cf4013a333ba22f4522ccc1c5f005bea2aa99aaad5042ff892a75e6963721b02a6043a846e3be418b35c16b5027d397f7ec712c6cc4188090f756
-
SSDEEP
49152:EC8xRXw54Ms9CWTdmQvNiW5xY4//JljIiQk/:EC8zwxYCW5Ck5/PjbQO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 444ed4bb8e1631f1a2e9f4eb12bb00cc_JaffaCakes118
Files
-
444ed4bb8e1631f1a2e9f4eb12bb00cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 984KB - Virtual size: 984KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
d Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE