Static task
static1
Behavioral task
behavioral1
Sample
38b861d46f9d6d43aadcd7695370862a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
38b861d46f9d6d43aadcd7695370862a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
38b861d46f9d6d43aadcd7695370862a_JaffaCakes118
-
Size
58KB
-
MD5
38b861d46f9d6d43aadcd7695370862a
-
SHA1
b63ffe4c7d03ebe8e6d6fced75985e42a1b9f7b2
-
SHA256
678e0cd8280785f30deb15f6720ef455b32bf203a70dbb0726636ef7a0af31ca
-
SHA512
3971bb55b49b62793536285586e2c4a5f83b10c44330b72030bf452430d2698d46888dcf21447759cad4f1b3681aa1fbd31e32192f4630b3fe38f43a7f4481d6
-
SSDEEP
1536:15c2Tqe1OyT4XcBvmc9oVopPcWLtq6dWAglW4KEubPIJ6:b5mc9+o1hq6dtps6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38b861d46f9d6d43aadcd7695370862a_JaffaCakes118
Files
-
38b861d46f9d6d43aadcd7695370862a_JaffaCakes118.exe windows:4 windows x86 arch:x86
b4a6265375b722d2d504c2ce960e9775
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetViewportOrgEx
GetObjectW
MoveToEx
Pie
kernel32
GlobalSize
GlobalAddAtomW
LocalAlloc
GlobalCompact
LocalFree
GetVersion
msvcrt
_gcvt
_heapchk
_inpd
_mbslen
_ismbcl1
_scalb
_mbsnextc
Sections
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE