Static task
static1
Behavioral task
behavioral1
Sample
38594433f4d26176deab56df580ea45d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
38594433f4d26176deab56df580ea45d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
38594433f4d26176deab56df580ea45d_JaffaCakes118
-
Size
15.4MB
-
MD5
38594433f4d26176deab56df580ea45d
-
SHA1
ce8583e6f14716461aaee60760025dbf937144f9
-
SHA256
f479568fb724955a6aec8164e47b11a39a29cdb82326437f8b902b33e25054cb
-
SHA512
40c9dccf79586b6ca88af49727ba1a30c46cc0609f17a26f1a6ff030d305289f4354da9832c663f387a50c2cbcd9309ddabbfc810e96985b4392e79e02303def
-
SSDEEP
393216:BTYDZfrkaFBUSXwjH90n4TBmAXdXogvqRc3j0Jq4Jtzg:KkaFRw59RoK6Aje7zg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38594433f4d26176deab56df580ea45d_JaffaCakes118
Files
-
38594433f4d26176deab56df580ea45d_JaffaCakes118.exe windows:5 windows x86 arch:x86
cb3c21006f03fd1fce204d7639fc6245
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ExitProcess
GetCurrentProcess
GetModuleHandleExW
GetTickCount
GetCurrentThread
VirtualFree
GetProcessHeap
VirtualAlloc
IsWow64Process
WaitCommEvent
EnumSystemLocalesW
winspool.drv
ClosePrinter
OpenPrinterW
Sections
.text Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 860B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 17B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ