Static task
static1
Behavioral task
behavioral1
Sample
38ebe17ebef32a5d9c0899b618c2eba6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
38ebe17ebef32a5d9c0899b618c2eba6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
38ebe17ebef32a5d9c0899b618c2eba6_JaffaCakes118
-
Size
115KB
-
MD5
38ebe17ebef32a5d9c0899b618c2eba6
-
SHA1
409042f76037049764808c3190e90955e5e75cff
-
SHA256
90eabf5b24468fb61809daedc98201bc93b23fb80af67b0efb9acd8ad0b12978
-
SHA512
12587b7f656e422acfcb253d8f8aeb8adf22f0fb77ca19435a44bdad283c24d0e7405aa77f581151c096afacc25e9d6a53377cce445d2f2cbcb40bdf76940b3a
-
SSDEEP
1536:jHgexEVjZrH92E0OYXyNTRtth6fBZT60nkkoR/npV:jHvxAjZDQ6YiNTR16X20nkkop
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38ebe17ebef32a5d9c0899b618c2eba6_JaffaCakes118
Files
-
38ebe17ebef32a5d9c0899b618c2eba6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ