Static task
static1
Behavioral task
behavioral1
Sample
38dc677a8c06f461ee41467e0e177201_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
38dc677a8c06f461ee41467e0e177201_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
38dc677a8c06f461ee41467e0e177201_JaffaCakes118
-
Size
79KB
-
MD5
38dc677a8c06f461ee41467e0e177201
-
SHA1
06f566afd4b8443b5de9c5e0bcb069ce26e2a794
-
SHA256
6fe7fc95aec6ee57afa9c3fe5ed6087f997b88b652a3053584635233c558db3d
-
SHA512
7356a62f24066884d3af8be713b0640dd8437e3ce7ea71870af54f72184fa3bfed686dd410d2fca35ae246167099ae812fe2335c23e2429907f8d2d391360a67
-
SSDEEP
1536:KGBtxwMugN9zjQ8lRKLrhI8k2IWBYQbF4mMVdq5fy7UVDhP7h2Bmb:RBtxwpI9zM8lRKfazVdcygBzb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38dc677a8c06f461ee41467e0e177201_JaffaCakes118
Files
-
38dc677a8c06f461ee41467e0e177201_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ddfd Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gdwq Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fgbv Size: 65KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE