Static task
static1
Behavioral task
behavioral1
Sample
39da3652507831bfcbf97a7e474bbbad_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
39da3652507831bfcbf97a7e474bbbad_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
39da3652507831bfcbf97a7e474bbbad_JaffaCakes118
-
Size
520KB
-
MD5
39da3652507831bfcbf97a7e474bbbad
-
SHA1
16ab7c3bcf22370ca9e3f8779cc0ca399f230082
-
SHA256
3d2e7cbcf7b951f6d26c690e95674e47707d5c32de96f6864d287985caf34ed6
-
SHA512
95b32171fd4f653060d8cc37c2634d571ebae4c2af3d56871b9931829dc0ca5191d0a314590b4ab441f228f124092ce4dca56afb691698340747e0d84cbcf184
-
SSDEEP
12288:r1r6t15NE0UXgc2AjKjq72QlHqsmQPbVTS:rB6d+0WgaeuyWTmQ52
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39da3652507831bfcbf97a7e474bbbad_JaffaCakes118
Files
-
39da3652507831bfcbf97a7e474bbbad_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 491KB - Virtual size: 496KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE