Static task
static1
Behavioral task
behavioral1
Sample
039c5a34289ed396bf18920ab8f48e91_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
039c5a34289ed396bf18920ab8f48e91_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
039c5a34289ed396bf18920ab8f48e91_JaffaCakes118
-
Size
100KB
-
MD5
039c5a34289ed396bf18920ab8f48e91
-
SHA1
96bcd09dd7ccc9a257e7250fb8003190db4c8899
-
SHA256
538506915f041d8396298a5bc7320a6a4c4bd41080a892dfb3c44d63711e5c7e
-
SHA512
d047247ad7c3941f974932f56b27dd60a267f133509c51b3f199b61d8a1faec786d8567651527ca7905b26ee11f20872a9624c539dd9e4f8da21877ae108cbf7
-
SSDEEP
3072:YU0qM3GyreSvEXz7rdvuxIj/urvKifaCUV/:Y/3preSS5uxawK4aZV/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 039c5a34289ed396bf18920ab8f48e91_JaffaCakes118
Files
-
039c5a34289ed396bf18920ab8f48e91_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
iml Size: - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
otwnufr2 Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
khf47 Size: 987B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE