Static task
static1
Behavioral task
behavioral1
Sample
96a3734f3ffc54507d83d1a7f7a31b35_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
96a3734f3ffc54507d83d1a7f7a31b35_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
96a3734f3ffc54507d83d1a7f7a31b35_JaffaCakes118
-
Size
190KB
-
MD5
96a3734f3ffc54507d83d1a7f7a31b35
-
SHA1
5a6d98c81302ddf210d45252332036cfcdb4d978
-
SHA256
37772eedad31ae159915840b650350ed6da6be358b877de526a1bc0b31bcde51
-
SHA512
1e6d9aa420d931f2816e9c2390000c4e9bdb326a42d21d9dbcf9f692c895eea8f376dcea15a3af233ca69cac7abb8884c48987f7d34665af1f2bafdfb9901fa5
-
SSDEEP
3072:inh5UKsFHrypVDfPpcd/pOzcdYhMK9Ob9NLJzZWiLzWR/hxWN9CbPh3Dz:ih5UKsFHGfxc7tYhMCOZNWiGRpAQR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96a3734f3ffc54507d83d1a7f7a31b35_JaffaCakes118
Files
-
96a3734f3ffc54507d83d1a7f7a31b35_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 14KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE