Static task
static1
Behavioral task
behavioral1
Sample
38f19a60ad603abd929ccb169f65f4b2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
38f19a60ad603abd929ccb169f65f4b2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
38f19a60ad603abd929ccb169f65f4b2_JaffaCakes118
-
Size
12KB
-
MD5
38f19a60ad603abd929ccb169f65f4b2
-
SHA1
4bc580ee5a5de88f357c6801ff779a80fc89c974
-
SHA256
6e43b008d266d8902cb720071a395ee1a1a0c52fdf1f307b71547da3e94e1443
-
SHA512
54f9fd1d128aac8b2eb4b172d95499241e6373f6f851c0bfdaac820dc156ff68560f1e2979c3ed0a3ba7224dc7002e7ad3fe0a5135678dd93c3f89b8d18d7512
-
SSDEEP
192:IhLM3kNnGM4pMGR0URLn3VpN5Ft8/xqXPDhHF+eujwAtzz8U1t8BShWuCiXfEYZd:0uSIpMGyMpNoAPtsFziuYY539
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38f19a60ad603abd929ccb169f65f4b2_JaffaCakes118
Files
-
38f19a60ad603abd929ccb169f65f4b2_JaffaCakes118.exe windows:0 windows x86 arch:x86
eee9062b8cbe1efb89c250150605b1a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FatalExit
Sections
.nsp0 Size: - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ccp3p Size: 1KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE