Static task
static1
Behavioral task
behavioral1
Sample
e96cbcd570a0bbcc251550fbe827e519_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e96cbcd570a0bbcc251550fbe827e519_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e96cbcd570a0bbcc251550fbe827e519_JaffaCakes118
-
Size
12KB
-
MD5
e96cbcd570a0bbcc251550fbe827e519
-
SHA1
7313eb7e2e132edcd6d351d0d1309f845df8f270
-
SHA256
ddb5650ac60c3a2da160f8513c008b6777b0cce0517aa21247ea95a64c2f6bc0
-
SHA512
e5b044adf6e45d0f1ef78e1035db210f336768b4c1121dd64b2f33416a1ba585fd1a02289206d5ea08c357b402c83ca517ea410ff9af18e87f3824c698e757fc
-
SSDEEP
192:0gkvlJPlrcvdyUm4y/AMYXvP3zLGK8Cu6nSovmoUSn2dQAi:fvdzpP3zVtyovmHQAi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e96cbcd570a0bbcc251550fbe827e519_JaffaCakes118
Files
-
e96cbcd570a0bbcc251550fbe827e519_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 302B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ