Static task
static1
Behavioral task
behavioral1
Sample
38f5e6713afab812d4a3f2b830653e01_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
38f5e6713afab812d4a3f2b830653e01_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
38f5e6713afab812d4a3f2b830653e01_JaffaCakes118
-
Size
216KB
-
MD5
38f5e6713afab812d4a3f2b830653e01
-
SHA1
dc8cbfe3f8c98dd4c15c96f1630de597cb666317
-
SHA256
65b0c5a359d0c50887fca1cc1ebb6e34f3c432da6c3c784393531c8228b85d3a
-
SHA512
f0bfdf6e505472f0b471375f088420220c21a6decbce00c6def3e2939c8b463b15798ba26a5319361f293e8a512e2b64cb33d8a321c7c97031e6bcbb8701280c
-
SSDEEP
6144:EMKNJyiaTD2Y8QExron49StCznXv01bLbVNqg:E/EiaTD2lxru49ScznXKbNsg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38f5e6713afab812d4a3f2b830653e01_JaffaCakes118
Files
-
38f5e6713afab812d4a3f2b830653e01_JaffaCakes118.exe windows:4 windows x86 arch:x86
a68e54628256d1f772051db3928e6496
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
Sections
����a Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����ta Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����t Size: 20KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����c Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
����ta Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE