Static task
static1
Behavioral task
behavioral1
Sample
384852a022c3b8a778c4435ed927a49c_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
384852a022c3b8a778c4435ed927a49c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
384852a022c3b8a778c4435ed927a49c_JaffaCakes118
-
Size
1.5MB
-
MD5
384852a022c3b8a778c4435ed927a49c
-
SHA1
6b4e554674b0725219717a048776babe32f2bf08
-
SHA256
b12c67cd1a0fd86e6672eb65c81f3884a4ad9722b572a70c164f60fdc9fb4426
-
SHA512
73844a81a762c5f3dc5a20aff60db2811607e79e9d6c910c6474b9ffea259374a4cab10c140154d96e05f732944d268a59274e4683c33713f87f25c1c39b971b
-
SSDEEP
49152:2pwSoVgvRlv+C8lGWLR7bby61nRy9Z0MkOA:2pwSWgvjV4dR7b261Ry9Z09OA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 384852a022c3b8a778c4435ed927a49c_JaffaCakes118
Files
-
384852a022c3b8a778c4435ed927a49c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 1.5MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE