Static task
static1
Behavioral task
behavioral1
Sample
38443d121dae9d646fe6b1ad80f9859b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
38443d121dae9d646fe6b1ad80f9859b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
38443d121dae9d646fe6b1ad80f9859b_JaffaCakes118
-
Size
17KB
-
MD5
38443d121dae9d646fe6b1ad80f9859b
-
SHA1
169b581faa94f3491a3effb13fabc27e03dd22c5
-
SHA256
c3431fa6fe8dc5909faba5a17e36c8039f5477131ec258d5d04488d066680b58
-
SHA512
78ddda54bf4ea8bb5785a00667e15cc1a6eb7189fecd23b711281432ba934a0f713ea54d2b2f0fd2aeb891ff735428cda07d80a6a63e70d482cc25a6a850c986
-
SSDEEP
384:H2oPqVmIH/m/o3q4jmx2KX5i6gR/PVPhKUKb8dYtve:Rqi/o3qgc5ipPVjyKAv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38443d121dae9d646fe6b1ad80f9859b_JaffaCakes118
Files
-
38443d121dae9d646fe6b1ad80f9859b_JaffaCakes118.exe windows:4 windows x86 arch:x86
2eda502d39734c2a70c5e0d029966397
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
ExitProcess
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE