Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_44f01a0ccbea5cc538039f1dc592dc0b.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_44f01a0ccbea5cc538039f1dc592dc0b.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_44f01a0ccbea5cc538039f1dc592dc0b
-
Size
260KB
-
MD5
44f01a0ccbea5cc538039f1dc592dc0b
-
SHA1
8db8467fc3f2ee60237f842b418e6a482d3e0714
-
SHA256
2a6255a295656f6732fd54bd573ad4a8d79e15ce2362f361c914e35913bf5f07
-
SHA512
0c81fc89f86c5b9f20e66894c4490ce9780de3f26237b6cce493a3300ca689c1225e9880741707654a7ed30fdf6507723eb15782882ec1b8716f79bf1d2d14cf
-
SSDEEP
3072:oR+5rNUgD6dOvbSFVQCNzE4CfEglIBZs9VYpqMfyY3tLPwUl+HryFswxc59x9H57:p5ygefQSE7MHZsjYpqDY34LpXHaEdt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_44f01a0ccbea5cc538039f1dc592dc0b
Files
-
JaffaCakes118_44f01a0ccbea5cc538039f1dc592dc0b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
gYkfALf0 Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
P3DGtaMD Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
d2fPt6IS Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
x6nUdvqN Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ZRE8EA8a Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
P3DGtaMD
-
ZRE8EA8a
-
d2fPt6IS
-
x6nUdvqN