Static task
static1
Behavioral task
behavioral1
Sample
39c79b07a1ce5241ff36cf3098a3c761_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
39c79b07a1ce5241ff36cf3098a3c761_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
39c79b07a1ce5241ff36cf3098a3c761_JaffaCakes118
-
Size
124KB
-
MD5
39c79b07a1ce5241ff36cf3098a3c761
-
SHA1
cc4357aea9c0c232e4927c05621d4b36d756948b
-
SHA256
4060e73b4065002ed122278771d7a3c28327a117691be804e8a57e76ecb1a6b2
-
SHA512
13443097ea5a1c2a4397a4e07f6de695f6d16fc6bfadcb9fbc23f5a61423c6dae47eb437ee241c3cec8e182c44751fed6888984ef27a8dc657c3282c763d8b53
-
SSDEEP
3072:zOURu80haT0yhlpQYyVuzgcS4TX16mQHcr:n0NyhfyVcgMb1r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39c79b07a1ce5241ff36cf3098a3c761_JaffaCakes118
Files
-
39c79b07a1ce5241ff36cf3098a3c761_JaffaCakes118.exe windows:4 windows x86 arch:x86
2bffedec68592d3567c495f82c1bb3b6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmp
IsBadHugeWritePtr
LockFile
GetPrivateProfileIntA
GetAtomNameA
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
CODE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pack32 Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ