Static task
static1
Behavioral task
behavioral1
Sample
38a9595eb997f3c5f98f15339a3b22b4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
38a9595eb997f3c5f98f15339a3b22b4_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
38a9595eb997f3c5f98f15339a3b22b4_JaffaCakes118
-
Size
20KB
-
MD5
38a9595eb997f3c5f98f15339a3b22b4
-
SHA1
fd2cca7f99028fcf1909642024ae499cfe53a2cc
-
SHA256
6e8c5998ca40f5f43bf51a5c320d18c6254c61d2893b9fe97266cbf81ececeb0
-
SHA512
27fdf0a6d127d097d48ff9a42a6783167b621e6697f62909d4c39d0a0c2253a316b5aa29dd24b9073b1525b522010c5a8a733650810a9f23a6c147b7e1026b98
-
SSDEEP
384:VGbvC8Y2fzMYmfuAQdAeHT1YJinMxbxK7G/WgkONJ2F92DIZhEI0x:VP72bUfNezqIMcYWgkONJdeE/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38a9595eb997f3c5f98f15339a3b22b4_JaffaCakes118
Files
-
38a9595eb997f3c5f98f15339a3b22b4_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pepack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qnk Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE