Static task
static1
Behavioral task
behavioral1
Sample
96da16d710d246ed127ee7eb88205361_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
96da16d710d246ed127ee7eb88205361_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
96da16d710d246ed127ee7eb88205361_JaffaCakes118
-
Size
2.5MB
-
MD5
96da16d710d246ed127ee7eb88205361
-
SHA1
af9e42dcc407f2c19ecb1dc43df5d2840451da4a
-
SHA256
dcbb7b3a8390cc7e9dcf9df2624f740276b8aa24a55813fd0ff4a1bc45e7fd27
-
SHA512
2394dd18d1134baed98e41018dab3d0b5e1d37ba3e133e1f8aa070301bce448eb552447dabca56d99a0739b389b14df590532b9a2fb80b25311629a45f4c0555
-
SSDEEP
49152:TIjfOUY8MPO6K3dKlURty6ZSDOwc0Dy2069g30EySpTkDMjrxrtK:gfOUY8M2glUR7Cq6m3lyD+K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96da16d710d246ed127ee7eb88205361_JaffaCakes118
Files
-
96da16d710d246ed127ee7eb88205361_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2.2MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ