Static task
static1
Behavioral task
behavioral1
Sample
96c051e2da7209f6f7eb6f2969713612_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
96c051e2da7209f6f7eb6f2969713612_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
96c051e2da7209f6f7eb6f2969713612_JaffaCakes118
-
Size
572KB
-
MD5
96c051e2da7209f6f7eb6f2969713612
-
SHA1
64b63680c6914e9098cd0dda8e6c37e4684b5864
-
SHA256
88b3f49adbc6b31b14bf16e2882c31f2c423612cd093373b6a1e710dfbe09bcf
-
SHA512
57b2c2b7fe610363b7fdc10797fb5cb3c9f2cbbf9c2b264336800016014e781f848cf5e743f69a29db2400f3f6968668bf84dec5c39c2182b5e41b9633ea2bbe
-
SSDEEP
12288:dJybviu94mp1LF1Hsf95nk+pU1+bOZcyh8GkFtO5GNK:Ki04mpZMUwyh8G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96c051e2da7209f6f7eb6f2969713612_JaffaCakes118
Files
-
96c051e2da7209f6f7eb6f2969713612_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 504KB - Virtual size: 500KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ