Static task
static1
Behavioral task
behavioral1
Sample
838544e6530e4755c9d5815ef54885e8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
838544e6530e4755c9d5815ef54885e8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
838544e6530e4755c9d5815ef54885e8_JaffaCakes118
-
Size
88KB
-
MD5
838544e6530e4755c9d5815ef54885e8
-
SHA1
bc23b9f73e34c47a76b8cc52cacaa1c12b489483
-
SHA256
23b078da4a554ee02d2dd1e145868ee067d7b4d7fb90f4435b4585ad181e3b55
-
SHA512
ef2d23c61811bf911fb4de7a8a9de4e19bdcca831c3e2260486e11437dd477b78b90dde53c62ea9228efae954a5e0ac08f766062c654a35f4717d49e26295e17
-
SSDEEP
768:xg3+1qTlezZEatuHqLPkhEryY5USTMSuHcj19lmVWUE2q7NRbCxX5HoL3/QZZHwq:xu+1qeZmhtYhUKLPyQH2xEAAwT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 838544e6530e4755c9d5815ef54885e8_JaffaCakes118
Files
-
838544e6530e4755c9d5815ef54885e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�S=`� _� Size: - Virtual size: 376KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
E��<�� Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE