Static task
static1
Behavioral task
behavioral1
Sample
39a552237695e371f050996f58bd8673_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
39a552237695e371f050996f58bd8673_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
39a552237695e371f050996f58bd8673_JaffaCakes118
-
Size
345KB
-
MD5
39a552237695e371f050996f58bd8673
-
SHA1
dc7c740185af247dca273ff5f6befb77a3b939d2
-
SHA256
aadad9ad44ee05221708c7053fe5a39a8b656881d9653924efb3cfbda897d51f
-
SHA512
109e325f5e0f05a183c301b183b113940f1695819e41ff5d6d20d23ebbd6bb305fe51488e55a1967c2f2a44079e0bbce66676d7b1cb669e7e0d175b930c60fa2
-
SSDEEP
6144:OrEAQQwLS9UrL79p15cCUMR/yn+aC1meyUGimMN/7BoK1LP3GXlsn6zyM5e:GEDLuwJaW1meyUGpa/Rh2snKyM5e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39a552237695e371f050996f58bd8673_JaffaCakes118
Files
-
39a552237695e371f050996f58bd8673_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 113KB - Virtual size: 556KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 227KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE