Static task
static1
Behavioral task
behavioral1
Sample
44d3c195b66680a2bb3ba18767c22978_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
44d3c195b66680a2bb3ba18767c22978_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
44d3c195b66680a2bb3ba18767c22978_JaffaCakes118
-
Size
9KB
-
MD5
44d3c195b66680a2bb3ba18767c22978
-
SHA1
bcf8f6b8f26fb84240f21fca309ca23970f04cca
-
SHA256
9dbd346d48633f8c84992cc90ea1db2f41a2f5f88a320a59e9d3e533eef4cb07
-
SHA512
10518f6551a9ccac99750c8f44596b37984e62319714f86dfe5d707fdc7cecad9dc886de2cc122a354df7aac5daf2320befcf5ab561afbe84df5ffca5e36b558
-
SSDEEP
96:Z14rS1ntS8v9Ch8KzWuwuW811nVqrdCtMyqUIYsKFHyqhuFO:MriL1Ch8qkuW88dFJgFHyguF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44d3c195b66680a2bb3ba18767c22978_JaffaCakes118
Files
-
44d3c195b66680a2bb3ba18767c22978_JaffaCakes118.exe windows:1 windows x86 arch:x86
236918f30602114db8db6c56101b871b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
UnmapViewOfFile
VirtualAlloc
VirtualFree
Sections
.main Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE