Static task
static1
Behavioral task
behavioral1
Sample
39d1254f1a1d68eb660c6c23a32c1816_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
39d1254f1a1d68eb660c6c23a32c1816_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
39d1254f1a1d68eb660c6c23a32c1816_JaffaCakes118
-
Size
6.0MB
-
MD5
39d1254f1a1d68eb660c6c23a32c1816
-
SHA1
72fefbf921750b99299e287bce0ce842f9cb0c51
-
SHA256
ab55cebff67fad9323efc82b3266309cbf14ce53e19fc492abc28aab8bf892a5
-
SHA512
320b43728a6358f9b4108d11bf5b9772635ce27891b2261f9613c9bf73c961a4bf58d929ce05b8a290e8047e1bf6079f4d74e2ecb11da1c1576dfea871998c6b
-
SSDEEP
98304:8mG0xLkKRr04hXrHfiVcbshv25bpOy+MFHRE0DZfHB00B0H:8KiQXDfiVz+5bpOyJFHRtPqf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39d1254f1a1d68eb660c6c23a32c1816_JaffaCakes118
Files
-
39d1254f1a1d68eb660c6c23a32c1816_JaffaCakes118.exe windows:4 windows x86 arch:x86
9932ea624e4641f4d49c2c307092d45f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
GetPrivateProfileSectionA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
0 Size: 498KB - Virtual size: 1017KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 17KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 36KB - Virtual size: 377KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 836KB - Virtual size: 833KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: - Virtual size: 59KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 39KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6 Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7 Size: 6KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE