Static task
static1
Behavioral task
behavioral1
Sample
380dc73c4cfafd28f245f6723a173883_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
380dc73c4cfafd28f245f6723a173883_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
380dc73c4cfafd28f245f6723a173883_JaffaCakes118
-
Size
9KB
-
MD5
380dc73c4cfafd28f245f6723a173883
-
SHA1
f3183c8dc13cb911191b9d0cd10795ac1772c8c4
-
SHA256
c248b009e7fd084d770154bd142d5e1da6d96da36f2fa2cf64a3739cc529e567
-
SHA512
1cceda67e302a315df27e39494d6b065ef6899f707be35d3feb66d38af571c9fc23da7f3ab9713f603fce601fa9c66c61574332cbfefcfcb1bb7bb7e44052d3a
-
SSDEEP
96:lmbWm+SJFKAsYdTdyTX8gkREkAhzdB8tmnxyQU3MXmk10qZ6m6Vwnvre:llm+S+9YdTi8U1hpFkhY0qn6qe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 380dc73c4cfafd28f245f6723a173883_JaffaCakes118
Files
-
380dc73c4cfafd28f245f6723a173883_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 7KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE