Static task
static1
Behavioral task
behavioral1
Sample
44c6f56d6ed3589fcdf3b93cd1f94da0_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
44c6f56d6ed3589fcdf3b93cd1f94da0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
44c6f56d6ed3589fcdf3b93cd1f94da0_JaffaCakes118
-
Size
526KB
-
MD5
44c6f56d6ed3589fcdf3b93cd1f94da0
-
SHA1
0ac00c045345b11efe11d66733aabaf18b124409
-
SHA256
6a61e7da474b4df0c0f0ecbdf47117f6858a88f92eb9cadbd978d96135025dcc
-
SHA512
72ec5ce4f7b9c7b98dda0c48bdf9ab9b0601f70d06201cdbb12e584491a6ff44517bfe660abf0f3ea88fa795584a611b1404087529f0eaa8c23952b1121ac05f
-
SSDEEP
6144:lZGhg5KO60bpDl1fP2d6NKmrH1dsBu60MdqLx40LCHiMmaqOiv1p6O01k9D/gfDj:fFZJP2QNKO8z0MdqLhCCbvr6OTk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44c6f56d6ed3589fcdf3b93cd1f94da0_JaffaCakes118
Files
-
44c6f56d6ed3589fcdf3b93cd1f94da0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: 396KB - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE