Static task
static1
Behavioral task
behavioral1
Sample
39f085a1f11182deb5672cc31b4f217e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
39f085a1f11182deb5672cc31b4f217e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
39f085a1f11182deb5672cc31b4f217e_JaffaCakes118
-
Size
760KB
-
MD5
39f085a1f11182deb5672cc31b4f217e
-
SHA1
4b920956de713e8ce7ef3b832402a470f15023f3
-
SHA256
6abc280030b041d0399ddf9d07f344f64dec2efb2523bb5b9e5c1f84d555e6b2
-
SHA512
73829b771cc2403106468bb494f3a5c5efd7f21ab0e2801663e82cb16e8d0477493de1d4a1668353736163981c4247c596150fbb363bb47039b2f52b310fbc01
-
SSDEEP
12288:Pt0ufelg92duk3npXPRtGd7j0tgkoBJqZnI9tsfi6AU/yU/B6Pl/FIO:6ufe9dRpfIX0tgkownImeU/yU/B6Pl/m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39f085a1f11182deb5672cc31b4f217e_JaffaCakes118
Files
-
39f085a1f11182deb5672cc31b4f217e_JaffaCakes118.exe windows:4 windows x86 arch:x86
613bc8dd3a2a7acaace062ab18b38640
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
lstrcpy
VirtualProtect
ExitProcess
comctl32
InitCommonControls
Sections
Size: - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��~j@ Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
������ Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
������ Size: - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
������ � Size: - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
������� Size: 664KB - Virtual size: 662KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�o�n� Size: 4KB - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ