Static task
static1
Behavioral task
behavioral1
Sample
96a17f8aad79bb3a37c6661e8b20ad0f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
96a17f8aad79bb3a37c6661e8b20ad0f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
96a17f8aad79bb3a37c6661e8b20ad0f_JaffaCakes118
-
Size
212KB
-
MD5
96a17f8aad79bb3a37c6661e8b20ad0f
-
SHA1
e93e6cd0c466fa6ca11989ad089cacbe1b87911b
-
SHA256
bdf41c1f38ce8cad3a72cd276f99950456e6b45a1ad959f0262516250cc26452
-
SHA512
2eeb018cad8c055b6b418473de5fa939b139b62b781df619ac2863faeb5c9951ba2c6a09bdbbcd8fc2c3292d361370adf42cdc7ae74013c6e802b7987a832baf
-
SSDEEP
6144:l3M5PVw0YYoUSNuca7Zdqd+EtuGrYZopGOB5:pcrYYpCuca7DWRuGMGp3f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96a17f8aad79bb3a37c6661e8b20ad0f_JaffaCakes118
Files
-
96a17f8aad79bb3a37c6661e8b20ad0f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Hl7Z Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eCIXR Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ppuoBws Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE