Static task
static1
Behavioral task
behavioral1
Sample
38df3f6933aef0067918877c23882648_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
38df3f6933aef0067918877c23882648_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
38df3f6933aef0067918877c23882648_JaffaCakes118
-
Size
26KB
-
MD5
38df3f6933aef0067918877c23882648
-
SHA1
36f0b2e1312555c235e65e23d548e4b231135429
-
SHA256
9aa2638a862fd2a578239b7cc0f2079eeeb39e5bd7ed02f40c687d953f876452
-
SHA512
45b4e7e6be389d739fe364ce0b942554597fcfa5099c72f8e1f5f4b80d0382b299f3eb8655084960b0a403e32080c2166022e342ab442e8cba04ae4e4139a9b2
-
SSDEEP
384:CMF4uGOutbvPSahUyYyYTcWmScOtlH+zUXbty5WcCfbW9H3wyLJSNu14xHuKGLIs:5WuwvqyU3IW3X1Xb4CfgwEQs8CP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38df3f6933aef0067918877c23882648_JaffaCakes118
Files
-
38df3f6933aef0067918877c23882648_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE