Static task
static1
Behavioral task
behavioral1
Sample
038eb0aa7c51e9e915c5c97865d5e1b9_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
038eb0aa7c51e9e915c5c97865d5e1b9_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
038eb0aa7c51e9e915c5c97865d5e1b9_JaffaCakes118
-
Size
31KB
-
MD5
038eb0aa7c51e9e915c5c97865d5e1b9
-
SHA1
0ca8bc1d335e76c9fafea47b84faa77c05abd625
-
SHA256
43d1737c95113469ab00be561c2d1deeb9f4833e4109f1a2fb2b094dab838681
-
SHA512
afd9722ba8d91e9f5aa2b22b8862dd3214d94dd3a759974efb2aa65f3b7143cccc51a79363a88f20113eb2439f0b57cb720acb03c0589f1832cb2fb2fc8157a8
-
SSDEEP
768:PdOUUtTeZ6myHvGdMkw/gWBw/MMwnbcuyD7UYNWGE:PPUle8mAG5w/gWBP/nouy8IK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 038eb0aa7c51e9e915c5c97865d5e1b9_JaffaCakes118
Files
-
038eb0aa7c51e9e915c5c97865d5e1b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE