Static task
static1
Behavioral task
behavioral1
Sample
38578346d55c7361e07b69163236d2b2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
38578346d55c7361e07b69163236d2b2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
38578346d55c7361e07b69163236d2b2_JaffaCakes118
-
Size
368KB
-
MD5
38578346d55c7361e07b69163236d2b2
-
SHA1
25d27a786827279a0d1e848da77cb653b0cb31e1
-
SHA256
7b61672c0284627014c5f984d44254ddda8d6a63cae0b7bf387e3d8bee400630
-
SHA512
d3e653b08a6d5fa459a599a7c5c81662f1bdbc5912622eabe0de16025346f1b61b4099140dcc7285f50340efc6bc6a52607d80675e67facb6689516f4c5795b1
-
SSDEEP
3072:NgoAyPUPRewhmF0JBKqionegtTTXeMXP8BvNPjLKlX2GbpqLyXb5aIjPo3LrVMra:N/P0NOgtTTe2WKeuXbgI2IM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38578346d55c7361e07b69163236d2b2_JaffaCakes118
Files
-
38578346d55c7361e07b69163236d2b2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE