Static task
static1
Behavioral task
behavioral1
Sample
96d40170538ed6b9335997a9d5191c61_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
96d40170538ed6b9335997a9d5191c61_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
96d40170538ed6b9335997a9d5191c61_JaffaCakes118
-
Size
36KB
-
MD5
96d40170538ed6b9335997a9d5191c61
-
SHA1
1f22fd63b78a4e3ce59a888ebcd597909e07f226
-
SHA256
bf27491fcf575b0cb62c25304313d9ab3668d7780fa6fe306730e5990b8c1e86
-
SHA512
49e7ec0d807bfe50228e99567bb7dfe78e02f23a08c993247d7e3aa74d494f93a2c68d713fb2cff619f1c455c5ed02b0820b248ea8fa810ec62bb9abe89c6080
-
SSDEEP
768:7Qk1d6kb7ODwsxTkJME6GdV7rgnvQjX0Ar5Zi8E:7Ql8aD5mCcV7rA6X0Ar+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96d40170538ed6b9335997a9d5191c61_JaffaCakes118
Files
-
96d40170538ed6b9335997a9d5191c61_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 15KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE