Static task
static1
Behavioral task
behavioral1
Sample
44f9c5ca75e75884a17c8ef997000972_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
44f9c5ca75e75884a17c8ef997000972_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
44f9c5ca75e75884a17c8ef997000972_JaffaCakes118
-
Size
399KB
-
MD5
44f9c5ca75e75884a17c8ef997000972
-
SHA1
9a6ffce64f1bb75b60c045089df9b0f27b47f560
-
SHA256
bb18e774758764f08b33b328829cfdc7338472a596afc25ae722e72e3c1ea2ee
-
SHA512
684ca7b5abad0998f2b358697d5022dbdb79c95c0a9a0b119217a17d33cde27d55091418c56a58b53c5805989f2d35fa290c1620f2a61f8eb0cc6e3421dcf33c
-
SSDEEP
6144:4mbQpcFHsAM0EPfQmoR6SxuPGDIDt4el3wehHQhD0RdB3oSqlHHSCIX6IT+:4mbQmeAM0E6tHep3ldfqlnSC06Iy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44f9c5ca75e75884a17c8ef997000972_JaffaCakes118
Files
-
44f9c5ca75e75884a17c8ef997000972_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 576KB - Virtual size: 574KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 296KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ