Static task
static1
Behavioral task
behavioral1
Sample
38d8c01440d14d3c948791a2f7a8857e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
38d8c01440d14d3c948791a2f7a8857e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
38d8c01440d14d3c948791a2f7a8857e_JaffaCakes118
-
Size
398KB
-
MD5
38d8c01440d14d3c948791a2f7a8857e
-
SHA1
3d8926b88b37f4566af2233131654525b28bc95e
-
SHA256
b79eb0b99bcf4ae4f6768513d915eba6917a3efad0313b1989c3a1685640f4ad
-
SHA512
62a26c8818f074c274a30bdda3335b7be5252d2029f20ec8e428a2b607bc81be97e60d7831659b5371ca88322ed2e827ca35e1f56565221db85c083824be03d8
-
SSDEEP
12288:hsD8AhkBQfhQSLSHII9MksdjS3mAKZ+17g:wThkBQ+zouM1d23mAKg17g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38d8c01440d14d3c948791a2f7a8857e_JaffaCakes118
Files
-
38d8c01440d14d3c948791a2f7a8857e_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 382KB - Virtual size: 382KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ