Static task
static1
Behavioral task
behavioral1
Sample
39b7a6f0929d7303b193e3c23fbc5d5a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
39b7a6f0929d7303b193e3c23fbc5d5a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
39b7a6f0929d7303b193e3c23fbc5d5a_JaffaCakes118
-
Size
197KB
-
MD5
39b7a6f0929d7303b193e3c23fbc5d5a
-
SHA1
dd5043e9692bed7843b5d97c95ae83dded63dca1
-
SHA256
12afb3d0454322871f7910cf7a702dfa39bd890493a8ca5435b43346406edeae
-
SHA512
5d3d9ca1e09334af03a871353caf3a931ed2840094e91187296d9699c34733cd5e050134d85f77ec52cd85c4f6185b7027d88a5993f6f0b4fa1f8972678fa501
-
SSDEEP
6144:VLICJKWep0yMT6r52YfwvP6bQ7yMP+DE827YwBRUMbj:RI6KW3y4+5u6b7MP+Dd28yRpj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39b7a6f0929d7303b193e3c23fbc5d5a_JaffaCakes118
Files
-
39b7a6f0929d7303b193e3c23fbc5d5a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 52KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 676KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dfs Size: 129KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE