Static task
static1
Behavioral task
behavioral1
Sample
9738d3af36a32b1258f5c9c9a2c1393a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9738d3af36a32b1258f5c9c9a2c1393a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9738d3af36a32b1258f5c9c9a2c1393a_JaffaCakes118
-
Size
77KB
-
MD5
9738d3af36a32b1258f5c9c9a2c1393a
-
SHA1
ff0855008e1dbb8b138222c23e52b979614515d3
-
SHA256
32f7193e74e4278467cc765c73b6c67e73aa8ae67a5bba234af14701312bd6ae
-
SHA512
db89460cfae7dfc12ebafb3116edc7420bae8abec8a702743b32b130b1ed00f2fdcaad30b9bd7b52157fdce0bcf562378f5a0568bc335efaac339314e3b56b78
-
SSDEEP
1536:krIm5OeUSbp+sdPjqI/cv8mNukgghMhLdX23h7hl1JPG:krZIUlrl3Evr8OMhkhH1JPG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9738d3af36a32b1258f5c9c9a2c1393a_JaffaCakes118
Files
-
9738d3af36a32b1258f5c9c9a2c1393a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nixfqr Size: 3KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bhmhmg Size: 38B - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.umrpee Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ