Static task
static1
Behavioral task
behavioral1
Sample
38544d4a0dedbe117acca14e372e191a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
38544d4a0dedbe117acca14e372e191a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
38544d4a0dedbe117acca14e372e191a_JaffaCakes118
-
Size
56KB
-
MD5
38544d4a0dedbe117acca14e372e191a
-
SHA1
7d91f64ad3a390a5c041e623237bb54878c42b16
-
SHA256
e8a1600a65235ec4e218c07adfae7231b151846e392b75c135931cb6f780a8b6
-
SHA512
6f8d6e7930b241ac044c472b96dd063e20a1af51719114375783e7a7cc78d666054ee0f0118ac16c295684a950fe137ec5e137ade3c92d20228071b55b33631b
-
SSDEEP
384:9yrNfGXYwKNBWsWKOKdGIrdhSf6P5vN/Yp6ceAyrNfGXYwKNuDbd4wFzIeGsr:9IpGoxBvWcGIBIf6PlR/AIpGoxid4UIY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38544d4a0dedbe117acca14e372e191a_JaffaCakes118
Files
-
38544d4a0dedbe117acca14e372e191a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 60B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ