Static task
static1
Behavioral task
behavioral1
Sample
38e6dff87e0e462159f0e839bf23ef06_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
38e6dff87e0e462159f0e839bf23ef06_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
38e6dff87e0e462159f0e839bf23ef06_JaffaCakes118
-
Size
376KB
-
MD5
38e6dff87e0e462159f0e839bf23ef06
-
SHA1
530296a0a926b6ea48b66aabcf32bb0f43c8bd02
-
SHA256
992034523f33777232fa141af1f5d34db06f269c119c5874438516d8477d0ef7
-
SHA512
e0f31bf4daec82e4c55e2986abc6dbe0b1247be9feebd125f12da207d295a93daae9cf3398c4fc0dccad264a23b95c9554977cab30b19429a78db3032155056d
-
SSDEEP
6144:DYGZ3BSj55drjaumCUo/lObog5mSGlhE6gb3xwMPLXF+ve:8y3BSF5d/6CUo/lk/6OhwMjXF+ve
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38e6dff87e0e462159f0e839bf23ef06_JaffaCakes118
Files
-
38e6dff87e0e462159f0e839bf23ef06_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eeoa Size: 332KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE