Static task
static1
Behavioral task
behavioral1
Sample
38090dc3a7c0932be42dc2a6ac72e418_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
38090dc3a7c0932be42dc2a6ac72e418_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
38090dc3a7c0932be42dc2a6ac72e418_JaffaCakes118
-
Size
4.1MB
-
MD5
38090dc3a7c0932be42dc2a6ac72e418
-
SHA1
49cbb88befbeaa3c3ce3b24f3f0dd6a7d90c8479
-
SHA256
1afb9f22a88ba30087bcfc16a86ec83a3820f96c58051eecf32f679114d983e3
-
SHA512
a663e4a2c15e327b187d5ec233bde0f8f161a3bef21bcfed96e2de73e46d72cf0d0baeed479d3a5c2872466c376e87d446db182bf8b72eaa46393500c802da5e
-
SSDEEP
98304:MrQZ3rQZ2rQZ3rQZ2rQZ3rQZ2rQZ3rQZ:Mr23r22r23r22r23r22r23r2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38090dc3a7c0932be42dc2a6ac72e418_JaffaCakes118
Files
-
38090dc3a7c0932be42dc2a6ac72e418_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ