Static task
static1
Behavioral task
behavioral1
Sample
39ed3be97d3810b91887ac627159439e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
39ed3be97d3810b91887ac627159439e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
39ed3be97d3810b91887ac627159439e_JaffaCakes118
-
Size
92KB
-
MD5
39ed3be97d3810b91887ac627159439e
-
SHA1
618d7169ee5e864fd38a1417db71c0cffcb2beb5
-
SHA256
84a7c723937f24b08d93fc70d2edb38e7ef63670297c8fbdb83cb38537566bee
-
SHA512
c0be6811d3f2fded970229796adb37f0830ddc09269a14b3920369a2b390933752f12afcdee56c92b3d8eb63e4bcad845b8d9c1888e3dd1a9bb1422ce83e9ff4
-
SSDEEP
1536:AYSIvM/I10ZdYh2Te6KvmXK6vbEHQL4mCtGXFBe2iXf/k2D7XWFZ+BZCk9H1MwIv:oB/ZW2K6gmaWbEHU4g6v/kMXXZfH1m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39ed3be97d3810b91887ac627159439e_JaffaCakes118
Files
-
39ed3be97d3810b91887ac627159439e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.pgfdmum Size: 512B - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.cayshvz Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gubafjt Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.okbsbsv Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE