Static task
static1
Behavioral task
behavioral1
Sample
b38d85bf0491b4e3c98fbf4c213574f4_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
b38d85bf0491b4e3c98fbf4c213574f4_JaffaCakes118
-
Size
314KB
-
MD5
b38d85bf0491b4e3c98fbf4c213574f4
-
SHA1
9ef91cc4704d455385315fd6ed62d9201d6d73ed
-
SHA256
5fc8329c18b8b69f13fcd4be076ceee6a613b55d8d8d5acffe1f454aaf5396b8
-
SHA512
98d1c36e92884e7f23cb3a37dfca464a27343b97b6010c0e0ba3e3b3c4aa68cbbe7a8a8267b1514bd1e59d650aff368cc3be0cd58c6101d880476dae4c9f5f63
-
SSDEEP
6144:tCORw+VT1l1TG2RUcC/6PdhXPOGF85Gf6fAmbDUcvWNzMyGK+sMdNG:t3N1S2RvW6PdhX2C8cifhbD/+p8K+s6G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b38d85bf0491b4e3c98fbf4c213574f4_JaffaCakes118
Files
-
b38d85bf0491b4e3c98fbf4c213574f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.legion Size: 4KB - Virtual size: