Static task
static1
Behavioral task
behavioral1
Sample
38ec53220c0a808fa30ac5785307deef_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
38ec53220c0a808fa30ac5785307deef_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
38ec53220c0a808fa30ac5785307deef_JaffaCakes118
-
Size
41KB
-
MD5
38ec53220c0a808fa30ac5785307deef
-
SHA1
b12ad74f866f42d071175a84441ff1474bd5ceba
-
SHA256
1e96b631f966c952f8bde9d5ab2b929e2477f131ac7474b7eeadca223994d8df
-
SHA512
a6d92aa88794e5f59409b0cda0c54146d08e36cda948073f6da02ad6568db2294a604bb5ec4da9a9ce0da1bbe89b06c507a4d87baf3b3625416d16680f5c591e
-
SSDEEP
768:5WBsg6NoyM4li41oZz7ZxywJ0xjD9FRZPCaspYhiDzkdnTlIKQJWAEKMCw:U+MnTt7Z00uHnsOUzQTHBAE1z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38ec53220c0a808fa30ac5785307deef_JaffaCakes118
Files
-
38ec53220c0a808fa30ac5785307deef_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 36KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE