Static task
static1
Behavioral task
behavioral1
Sample
438a8697fc44a00db13060ad0eaeaffc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
438a8697fc44a00db13060ad0eaeaffc_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
438a8697fc44a00db13060ad0eaeaffc_JaffaCakes118
-
Size
251KB
-
MD5
438a8697fc44a00db13060ad0eaeaffc
-
SHA1
fb2e529dec47965bda1365b4033f0aa63aaa778e
-
SHA256
0249bc9efee6f693c31c39f51ecc26b17aaad1db7c75492a526ae188ba90395c
-
SHA512
5f0bd0b448edfcb4057e909c947433b575a5d57af99aae7516451f9aec5f09a661d07d61afcd8a32b859586b0b8fe59a8d9557d463a6d165907ef98914a1c8e9
-
SSDEEP
6144:Yw7e8pnr5C1NVEhtOUrhIrKn4Rxz7gAVHWeK2xpprx39gY9mLtquP/:Yw7eyrkM8bRxz0S5pNgY9mLpP/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 438a8697fc44a00db13060ad0eaeaffc_JaffaCakes118
Files
-
438a8697fc44a00db13060ad0eaeaffc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 942B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE