Static task
static1
Behavioral task
behavioral1
Sample
38b2b7a51bb96fcff0beb14e1c38be85_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
38b2b7a51bb96fcff0beb14e1c38be85_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
38b2b7a51bb96fcff0beb14e1c38be85_JaffaCakes118
-
Size
123KB
-
MD5
38b2b7a51bb96fcff0beb14e1c38be85
-
SHA1
d3df76dfa1059d1075f188ed22d1b1b3df527fc9
-
SHA256
7ef280a3479634280288cf7b522fb2d5226b2abccbd8e6be6bf9aa0e63009bb2
-
SHA512
118c67ca80c72d59345aa489548b3834c4dca4bf2138d2c994185d322a71b1059c4d63a618fb1f91cf59798b423e93e9a1e44c7e25c6d64fd88255bc4614f7d9
-
SSDEEP
1536:vvgsN2nzXvORAt/PFHfOH4Wgr3luHv88UTclel0GnToIfbIO89+Va7N:v1N2zXmqCMr3w8oryTBfN89+VA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38b2b7a51bb96fcff0beb14e1c38be85_JaffaCakes118
Files
-
38b2b7a51bb96fcff0beb14e1c38be85_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 52B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ