Static task
static1
Behavioral task
behavioral1
Sample
a38616fb08b623d9067c8e326598df62_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a38616fb08b623d9067c8e326598df62_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a38616fb08b623d9067c8e326598df62_JaffaCakes118
-
Size
196KB
-
MD5
a38616fb08b623d9067c8e326598df62
-
SHA1
439255083ee7de2657cf30560f7cce3d968898d1
-
SHA256
924ff684b59bcece9278cbaac7149e3ff0dbb2ba205e5ad5a38d68efb36853f2
-
SHA512
06f5af4bdc878d30e8b3477192afb554c077b68534806324c428276d2ea24d48dd92b78f1d66caeaf6fc3e10c0c2111baec1c37e5a4f288f80794721594b5314
-
SSDEEP
1536:98fiN76UBTxTnkxQSIG7rkH5cQL16iYlaNsDaFiwhiJ8D0vVMndOZoz6g5bdVRp7:98KloQSrkfJWki77ZCJdlwv/C/iM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a38616fb08b623d9067c8e326598df62_JaffaCakes118
Files
-
a38616fb08b623d9067c8e326598df62_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 256.2MB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ksiNI Size: 4KB - Virtual size: 4KB