Static task
static1
Behavioral task
behavioral1
Sample
389a5861893829e67cf105bfbebdecc9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
389a5861893829e67cf105bfbebdecc9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
389a5861893829e67cf105bfbebdecc9_JaffaCakes118
-
Size
30KB
-
MD5
389a5861893829e67cf105bfbebdecc9
-
SHA1
77af41dc43c7a82a5fc079ec0f9d32059b5dd719
-
SHA256
b2b22298aff452603914734822580ab925a3ae803340a530481aeaf5b14ee473
-
SHA512
57336f48811ef5d9524d5d7320638bb72eb9faa8e433356992786ea30ec233b076bf048ef428b729abbd12acc0c6db82912a1fca65c00b8809311977d5648714
-
SSDEEP
384:e4y9h7H8ea5m5Aizmxzu4dccZDRZ1j9aICx7wKthXFVEJhIE0D7:aH7KXiCxa4dccx+7/thX8J4H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 389a5861893829e67cf105bfbebdecc9_JaffaCakes118
Files
-
389a5861893829e67cf105bfbebdecc9_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DENIA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE