Static task
static1
Behavioral task
behavioral1
Sample
9596d6dd35c61687cb5d51fdf1e97f43_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9596d6dd35c61687cb5d51fdf1e97f43_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
9596d6dd35c61687cb5d51fdf1e97f43_JaffaCakes118
-
Size
32KB
-
MD5
9596d6dd35c61687cb5d51fdf1e97f43
-
SHA1
0f0553629c2d13ae613c3fc4088d8f773f4a7d1c
-
SHA256
de51ba0da5ca090fbbe204a8bdc75706f708067b0af82cd4a9d32ad2087c4764
-
SHA512
36930319a981f30be83b3ff6e4c15632c6ddf7eec8f39a3e8c0b61e701963fec787eeb828eec97642293ffb78fd345315b33773d5b94879031d366e2da3e6d68
-
SSDEEP
384:1T3ZS7Pp8HWecRL+dx4lcmlE+Co6225NDjvctyncQ0MXloMzXf9FTCS:d3Zk8HTCw4llQb04loIv9Fm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9596d6dd35c61687cb5d51fdf1e97f43_JaffaCakes118
Files
-
9596d6dd35c61687cb5d51fdf1e97f43_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 620KB - Virtual size: 622KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ