Static task
static1
Behavioral task
behavioral1
Sample
387b163017b32744ba83335fe8e655a0_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
387b163017b32744ba83335fe8e655a0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
387b163017b32744ba83335fe8e655a0_JaffaCakes118
-
Size
100KB
-
MD5
387b163017b32744ba83335fe8e655a0
-
SHA1
6ce87d1549e2f68d43a3d2f5a20effb1ebc54bcb
-
SHA256
923cc9dcf4f120f1c5d864637029130043dd6443371ba3a916e630a3d12ad1c7
-
SHA512
81d8f3cd8a8457eea1aa30181c58f8a3a3de68557297397a2fedc6bc7c5198777d2fe863ef71b5ce10af1dcfd54ce024507d3305648f2aa3564e45de8c0578dd
-
SSDEEP
1536:YXMS4hNIZVCAhADa4mkNNoWnHivkzMAovM8IR0vvEINmvq/wNrueJOEHRmeJw:YXMvhNcRZ4OP8z8HEs3o6KO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 387b163017b32744ba83335fe8e655a0_JaffaCakes118
Files
-
387b163017b32744ba83335fe8e655a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 9KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 242B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE