Static task
static1
Behavioral task
behavioral1
Sample
438f0a6666d8b49b345f793f3d978e18_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
438f0a6666d8b49b345f793f3d978e18_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
438f0a6666d8b49b345f793f3d978e18_JaffaCakes118
-
Size
3KB
-
MD5
438f0a6666d8b49b345f793f3d978e18
-
SHA1
505bb3a2a50dabac313673ed3de207f31622b623
-
SHA256
7225e19c7bf745b27edc1eea85f0c8610288709d03c4fd9509a3508611cad6f0
-
SHA512
334226e53d898c234efbb767c3c1b00ad65432a88f75681bba0d38dfd3191b3f4e510a25c3a40f958e1da0eaa45d0a49d743f0f68f1a84974520473ab7420358
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 438f0a6666d8b49b345f793f3d978e18_JaffaCakes118
Files
-
438f0a6666d8b49b345f793f3d978e18_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE