Static task
static1
Behavioral task
behavioral1
Sample
838bd2a7c5fe2c8bd8e45f4fd475b3c2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
838bd2a7c5fe2c8bd8e45f4fd475b3c2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
838bd2a7c5fe2c8bd8e45f4fd475b3c2_JaffaCakes118
-
Size
244KB
-
MD5
838bd2a7c5fe2c8bd8e45f4fd475b3c2
-
SHA1
0bd67ed852961128eba4b7262aef17ab67f4857a
-
SHA256
f2a38babc4c113332437c9658443c4f6825e8ccfe71f9322e75283d726cd2780
-
SHA512
61b382ed94baab6e31bc53c7c049727d72e41c039f14372aa4c301ce8a5df5731a1f85a8708500556501eecda37c2ab5da0c00dfcd154df6ef4f37e37a91d5fe
-
SSDEEP
6144:Od5FikUmMErt+G9KX2iR0Y4Der3WTyOcCEBQa:I5JUusG9S2iR0Y4Der3WTy7CG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 838bd2a7c5fe2c8bd8e45f4fd475b3c2_JaffaCakes118
Files
-
838bd2a7c5fe2c8bd8e45f4fd475b3c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 40KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DG Size: 16KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE