Static task
static1
Behavioral task
behavioral1
Sample
96f28c7e06c725cf205caaca6699c71a_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
96f28c7e06c725cf205caaca6699c71a_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
96f28c7e06c725cf205caaca6699c71a_JaffaCakes118
-
Size
179KB
-
MD5
96f28c7e06c725cf205caaca6699c71a
-
SHA1
14cc7dd50d7e4942c6dbfbd8fd7c86918190381d
-
SHA256
b76093540b4f039b3e664a7af578b385f7ef427023d53f9b5700c89249162fbe
-
SHA512
d93563dbfc30c6b3ca52ffe33d3aa9209f3c4ee18f3d105d9c1fde8c8134cef3b721e0b2a5aadf4e10a915b07759dc6bcc7ef2289f2be96b30235ad510a911c8
-
SSDEEP
3072:7OmNkYSsZD+v8RgjmaqZGpIS+0qc3gSq0VbiX3PnuRB2RkXOO9ULk7NR0ew:8YvDdRgjmaQGPPqc3gSBTB2wALIN2ew
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96f28c7e06c725cf205caaca6699c71a_JaffaCakes118
Files
-
96f28c7e06c725cf205caaca6699c71a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 272KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ