Static task
static1
Behavioral task
behavioral1
Sample
39d5b4991c3b4e3979d7d3e4ee964038_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
39d5b4991c3b4e3979d7d3e4ee964038_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
39d5b4991c3b4e3979d7d3e4ee964038_JaffaCakes118
-
Size
45KB
-
MD5
39d5b4991c3b4e3979d7d3e4ee964038
-
SHA1
bf18ed19732dc3d39c22c853bce931c0b3eb3c18
-
SHA256
0681298298a069cdf0da1f7bd70b7e12f184bb1cb68fa64ba91bee2b9376deed
-
SHA512
200a4e1fa3514672d688254817af3de03951ace73f6d94d2331495a6d0f062042a2765a46475bfdcbd243f6abb163117af342227fc38d21754ac722a46ff6f4c
-
SSDEEP
768:JKzyEb/3lJi3i3rlKbmqajg0CSrUIKJcZ9L1kTl5r8okkJdT+A0USOfOFbb:JIyEb/K3QlKbxajhCSrUIKu9L12lXdTQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39d5b4991c3b4e3979d7d3e4ee964038_JaffaCakes118
Files
-
39d5b4991c3b4e3979d7d3e4ee964038_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
PEP0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEP1 Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE