Static task
static1
Behavioral task
behavioral1
Sample
538857ff926d23345d477f2ba2a4e425_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
538857ff926d23345d477f2ba2a4e425_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
538857ff926d23345d477f2ba2a4e425_JaffaCakes118
-
Size
12KB
-
MD5
538857ff926d23345d477f2ba2a4e425
-
SHA1
67cd3e9f67a8b05ab1f600c0edffc12a75177214
-
SHA256
da326fa85f3fc32cdb2fa8e8063b0879269d88bb91bd9848d22390f126892726
-
SHA512
d586f5148d55e78fad8e9ac22ccb76f7eacabc3d91d0c39861d527e9d6514adc6d2c1ec8736503222ad6a94906ef8df8c7cd4f5ef31e444f6bb56eee51867796
-
SSDEEP
384:2QdhvSXJyUstImJN9sYMvHts7KoHQeGnRlvGEx5yZNJCSG:Vnv6EUiXLaYMvNs7KfeGnRdGEiJ3G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 538857ff926d23345d477f2ba2a4e425_JaffaCakes118
Files
-
538857ff926d23345d477f2ba2a4e425_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE