Static task
static1
Behavioral task
behavioral1
Sample
38f47b5c188ac003ed811468a758c1b2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
38f47b5c188ac003ed811468a758c1b2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
38f47b5c188ac003ed811468a758c1b2_JaffaCakes118
-
Size
26KB
-
MD5
38f47b5c188ac003ed811468a758c1b2
-
SHA1
215117e6ae032d9580c48f6851d618152e094f15
-
SHA256
e61e849312536be81c9a4b7bd4412fbf0ea761da54602644498d31dbe8d45c27
-
SHA512
c9a6fd29ec432e145fd24da73c99ccfff68173d7023e8c21c3a62380750d2c3e65a686dabb31949802f85094a89f88df688bf6e52ee96c95d825c3afc0faa0a2
-
SSDEEP
384:8zNWbWvkgXWH6Hjqiub1wz0KnXTpvbwzt7OuXyfzgVE9p3cp9+KqjuxCA:8BWiPLHwb1wz0CXT9wDmgVEL3VKqju8A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38f47b5c188ac003ed811468a758c1b2_JaffaCakes118
Files
-
38f47b5c188ac003ed811468a758c1b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.yuzonqp Size: 20KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.dvmfueg Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE