Static task
static1
Behavioral task
behavioral1
Sample
38a447a69611ac25a945258c1cdff757_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
38a447a69611ac25a945258c1cdff757_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
38a447a69611ac25a945258c1cdff757_JaffaCakes118
-
Size
20KB
-
MD5
38a447a69611ac25a945258c1cdff757
-
SHA1
1091181b27af27498f0a6f91890f7b549c4e8af4
-
SHA256
7d44de589cf58a2389cb31937208172b6d6ae014fd451800d89ead17cafd08f1
-
SHA512
501596042ecc8153b0397c6eafe0c4c17cf8e4c0c58435fd00dc7d7bc64e99cb61a41dcfa1897fd44325d1653a63000cadb58e38abf028ae9a191300e4e7e93f
-
SSDEEP
96:Ih7XNAkLZWJgR0C0kWsnEpRnRRTRYIjLGolxHaG7Pb4uITC6e+o9kG8OHv:IFXKO4gRTWKOBFYIHffV7Ej3SkIHv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38a447a69611ac25a945258c1cdff757_JaffaCakes118
Files
-
38a447a69611ac25a945258c1cdff757_JaffaCakes118.exe windows:5 windows x86 arch:x86
4278480a3186073fb1ab5bf06d0588eb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
GetCommandLineA
ExitProcess
user32
CharNextA
ole32
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
SysAllocStringLen
SysFreeString
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE