Static task
static1
Behavioral task
behavioral1
Sample
39eb29a42acd20a27c0480f39ac1d7b0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
39eb29a42acd20a27c0480f39ac1d7b0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
39eb29a42acd20a27c0480f39ac1d7b0_JaffaCakes118
-
Size
85KB
-
MD5
39eb29a42acd20a27c0480f39ac1d7b0
-
SHA1
52ed1a7e1a23e43c003916e94949b05b9837b50a
-
SHA256
a5cc3cf4a242ddc3148e233bb64bd482ddcf6b47e9ae5bc9274d576d1b103e20
-
SHA512
a43b36e3edbfe44cee0e1d655ce5b71d7555f6b47cca747999146306dc2d8fcbacbf55a441023130586aea427550cb8d227d8898c8edb86d1e98a3f63bb75f12
-
SSDEEP
1536:DfrBl3LaQrwjPtb6yDvWi7PesIaNAFZxhvanvyEbSYRArRKaNeKR+:Df9lbaQrIR6yDvdz8aCFZXvM6EbwrPNp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39eb29a42acd20a27c0480f39ac1d7b0_JaffaCakes118
Files
-
39eb29a42acd20a27c0480f39ac1d7b0_JaffaCakes118.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
PEPACK!! Size: 51KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEPACK!! Size: 6KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEPACK!! Size: 8KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEPACK!! Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE