Static task
static1
Behavioral task
behavioral1
Sample
387fd16ee19dacb3158959b61217b8aa_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
387fd16ee19dacb3158959b61217b8aa_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
387fd16ee19dacb3158959b61217b8aa_JaffaCakes118
-
Size
3KB
-
MD5
387fd16ee19dacb3158959b61217b8aa
-
SHA1
c722d6bf36d30e1f9bb96b40b7a00a44725acbfc
-
SHA256
a520ce95ac8ffb8dab1d91575d4a11367fce2068aab0a058f3ac3a68cd152a17
-
SHA512
ee5d8b79de36800cd3dc3a15355a6585fe564e54af30b930a3d75e5ce4fd8065fb781b5c5a2ad186201cb8bced4531a278c93b5b15ddc2952fbade49ed55eb34
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 387fd16ee19dacb3158959b61217b8aa_JaffaCakes118
Files
-
387fd16ee19dacb3158959b61217b8aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ