Static task
static1
Behavioral task
behavioral1
Sample
38e9472c3b613e6820fb075b597160b4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
38e9472c3b613e6820fb075b597160b4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
38e9472c3b613e6820fb075b597160b4_JaffaCakes118
-
Size
212KB
-
MD5
38e9472c3b613e6820fb075b597160b4
-
SHA1
d4de85d57c6d57666b1eec090952d11a72c9af86
-
SHA256
e74377256805e73ef9923c69db4a43f3327106eed40c9df756db175e37db2703
-
SHA512
bec8f1ac1e4849db6abe09e7e89f43781f61a8984fb29176c83d73b62c5cc1619d69bef0d176187a75fa1e6c5423f79efcf223d94cfd6cd7df2d65db98c29a1f
-
SSDEEP
3072:r5J+QgrzOq4H9Px8eCYUY+YU5YUYbYUYY8YUY0YUNRnppodlK:tQJOnH38e2Zppoj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38e9472c3b613e6820fb075b597160b4_JaffaCakes118
Files
-
38e9472c3b613e6820fb075b597160b4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 161KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE