Static task
static1
Behavioral task
behavioral1
Sample
38f20f564426851d8a4668298f48b8c1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
38f20f564426851d8a4668298f48b8c1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
38f20f564426851d8a4668298f48b8c1_JaffaCakes118
-
Size
380KB
-
MD5
38f20f564426851d8a4668298f48b8c1
-
SHA1
4ac16e981e2de15ad2ffcbb6c07b04cc4d03156e
-
SHA256
37845851f3533e59dd4f7743cf97ac52fa5a78afbfe3c3cfa3dae890b446e7c4
-
SHA512
08531565b2782d6659e1c306c80fbce726f7b41b7226c0cdfca39f12a07308451c6291dc3ea2855ad5afd870db0bda9522d41b5e9f9bb91b3b6740eafeb6ae4f
-
SSDEEP
6144:hjCELRoTKDdz0pW9+bsvjt7zerPUI39lQ3F2IYB/osmCcz+C33f:l/Tdzx9+bsvjtferX9m2IYBcq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38f20f564426851d8a4668298f48b8c1_JaffaCakes118
Files
-
38f20f564426851d8a4668298f48b8c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE