Static task
static1
Behavioral task
behavioral1
Sample
38f086e5179d046131e1eea38f683225_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
38f086e5179d046131e1eea38f683225_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
38f086e5179d046131e1eea38f683225_JaffaCakes118
-
Size
269KB
-
MD5
38f086e5179d046131e1eea38f683225
-
SHA1
7839e8c25bf534ff9a926f840bce9e4b8132daa0
-
SHA256
741a1d61346a3e23d09176e53e9cc47e3663a72f0c0e1b522a7f9a2f0c3b9098
-
SHA512
cc54abc7868bf0acd7f2645f5bcb3bae0daacfcd04687b61de4ea266f5ed390df11a196b18c338b1463cf2dea5b16cda43ca2dafb00c57367471efd7b3bd9a90
-
SSDEEP
3072:5JGRTd4ChBXwLRnMU7KwDO/lPMhB26TVQ6PUFzrqGuJs5n1PDGw:fETdBzXwLpMbgUPWq6cFrqJJqJGw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38f086e5179d046131e1eea38f683225_JaffaCakes118
Files
-
38f086e5179d046131e1eea38f683225_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 135KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 128KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
code5 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE