Static task
static1
Behavioral task
behavioral1
Sample
96db4ee9fb3a9c9ef1ab3c9fcf90481f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
96db4ee9fb3a9c9ef1ab3c9fcf90481f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
96db4ee9fb3a9c9ef1ab3c9fcf90481f_JaffaCakes118
-
Size
53KB
-
MD5
96db4ee9fb3a9c9ef1ab3c9fcf90481f
-
SHA1
e5a29c86f0f350a643be3930bb44c9d40efb7234
-
SHA256
e605640f10408fe2812806d20282bdd0d00f59e8e5dc41793a256ff1aefde8c2
-
SHA512
658ada1f82b181444eafdfc788973768be5a88ed6d135267a44c6f8060ff8520d4dfac849429ff83918c54155cf4ddc36956fe886086b3bb1797a6e265b48e6c
-
SSDEEP
768:nmNZQNaQdzbDc+nwGJFilW0s7n6QgHEupMzJHdMqHdITMHdwwHdshXDV:sodvoCeW0E6QgHEuYJRvx6v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96db4ee9fb3a9c9ef1ab3c9fcf90481f_JaffaCakes118
Files
-
96db4ee9fb3a9c9ef1ab3c9fcf90481f_JaffaCakes118.exe windows:1 windows x86 arch:x86
d76f4237a8ae158292f09835997a1d9f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
Sections
.text Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ