Static task
static1
Behavioral task
behavioral1
Sample
39b8a40a9825b9cf85b796a0ad2e53be_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
39b8a40a9825b9cf85b796a0ad2e53be_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
39b8a40a9825b9cf85b796a0ad2e53be_JaffaCakes118
-
Size
42KB
-
MD5
39b8a40a9825b9cf85b796a0ad2e53be
-
SHA1
ccefcf17b57fe8e4fc73ae599c491166003cd9f7
-
SHA256
7c5abf6dacf0231074ba20022b2ef86239c1863fd0b9a9b07ceb185190a61bdb
-
SHA512
3741e3a63e54d6c7d1476a16454891c9ffcfd199e1b5be3f0a2203f64695e2b051309d4795f63ff481acffb859e5f13233fe7c3542ebdeb5830ad91856fdbeee
-
SSDEEP
768:WezgezvQExsq70ZT0XuAbchGx3ONK/4zwZKAxqyGqrtHGlsbS0/bI+QeJBDhcmJX:WZGbym3ONKPRtmuHBhL2sVp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39b8a40a9825b9cf85b796a0ad2e53be_JaffaCakes118
Files
-
39b8a40a9825b9cf85b796a0ad2e53be_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 204KB - Virtual size: 202KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ