Static task
static1
Behavioral task
behavioral1
Sample
d38db2ede2abe75030c22fc3b82090b9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d38db2ede2abe75030c22fc3b82090b9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d38db2ede2abe75030c22fc3b82090b9_JaffaCakes118
-
Size
457KB
-
MD5
d38db2ede2abe75030c22fc3b82090b9
-
SHA1
32191d5cc262e2b8d67dd3228079e0ca91db7adc
-
SHA256
c36af03f20a0d0c2f99b6e3550a8feac987ee8fe82c49a1ac8cbfb1d535c985a
-
SHA512
06a253628c1a503307cf2cac46faf3242ba3f60a7f9febfd377d84df9fad14abbf162a4c85e95ecf4c7a9c874ca557bc438133111809ec0eaacef931dd443ecf
-
SSDEEP
12288:2oCfDwt0+ma4JZZ2SIeU5YqHdNVo+5P6sH+d+M77:2xfDwtvma4IFeU5zHdDr6Q+b3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d38db2ede2abe75030c22fc3b82090b9_JaffaCakes118
Files
-
d38db2ede2abe75030c22fc3b82090b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.sfgfsj Size: 2KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.wkdgxa Size: 61B - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ikuqls Size: 445KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ