Static task
static1
Behavioral task
behavioral1
Sample
387f73dd17a621c9813159d410044be7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
387f73dd17a621c9813159d410044be7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
387f73dd17a621c9813159d410044be7_JaffaCakes118
-
Size
23KB
-
MD5
387f73dd17a621c9813159d410044be7
-
SHA1
ccc2a14af55616d7d1779e082fe404db6f86eb23
-
SHA256
d8da1f1d9361a65b7fd50f572fbfae02cced175cbdee6d1279e5dfc1f93bc925
-
SHA512
415f72606f152d5bbdc2a0c1d4de997dfcc33264732eb62357ca9364321496b7de572fdc7700b0b2c4c799c5456893e1b8c8ff7cd7194d081898180becaf2886
-
SSDEEP
384:8n8mV+ApSHTn1qwYbMohxBbWLEO8IVZ5o7BEt89uvh4aQ2uEjh7+pg0s1+QwJujs:vi9JAjznXhJQPSR+LQUZ1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 387f73dd17a621c9813159d410044be7_JaffaCakes118
Files
-
387f73dd17a621c9813159d410044be7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 188KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ