Static task
static1
Behavioral task
behavioral1
Sample
38f54209faf86654d34b5433ae601f1a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
38f54209faf86654d34b5433ae601f1a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
38f54209faf86654d34b5433ae601f1a_JaffaCakes118
-
Size
129KB
-
MD5
38f54209faf86654d34b5433ae601f1a
-
SHA1
c73861294992e1dea577afa0ace788c960cc0db2
-
SHA256
f5d46c5b2767007a0697a1a124a95edd2c191a98d1c4a0e64c293da6c2a88e51
-
SHA512
4cf0a36f887c9b4e47719632d8c4b1d32da76d433e4a9c01ae2cdd1b48f33941fed15280898173b5d2be96040c036b1dd74e8a228edb1ceb29ca17eb88375c48
-
SSDEEP
3072:QVJrpl2u5BVsGDDT3q61PmJajI5OXXMuVQmEM:ovTGGDC6R61Hu+vM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38f54209faf86654d34b5433ae601f1a_JaffaCakes118
Files
-
38f54209faf86654d34b5433ae601f1a_JaffaCakes118.exe windows:4 windows x86 arch:x86
e484f17c4a7ee3ddd1a9d41d32665410
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleHardwareState
SetTapePosition
GetStartupInfoA
GetTimeFormatW
NlsResetProcessLocale
BaseIsAppcompatInfrastructureDisabled
EscapeCommFunction
GetThreadSelectorEntry
CreateMutexW
SetUserGeoID
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 105KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE