Static task
static1
Behavioral task
behavioral1
Sample
96ff57cc76150c74a8afb409099565c0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
96ff57cc76150c74a8afb409099565c0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
96ff57cc76150c74a8afb409099565c0_JaffaCakes118
-
Size
117KB
-
MD5
96ff57cc76150c74a8afb409099565c0
-
SHA1
c8b1919ed0e78c06eda3c74fe082bf9c353f418a
-
SHA256
322fbbb76d3179a962998150b4d7bc36dd80a3624590e6e31a9f4f4f0ad32d05
-
SHA512
452b697cfd726df8f5e25c586aeaef67b418c6cd7efa0897a3265fa5475ef89449572f69633dca130d1f220452989b6acecc49689ff5fc8cfc09e42eff86f1fb
-
SSDEEP
1536:I4nWDzvgtj2OAuzPl6++c5CAH0Hv7MVihUYtBS+OZeX3vUbxkoVta4TzlwwAa8sY:IEWDUuuzPx+c4p75lBPfqCCw4yHsnPw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96ff57cc76150c74a8afb409099565c0_JaffaCakes118
Files
-
96ff57cc76150c74a8afb409099565c0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: - Virtual size: 953B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 972B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
. Size: 9KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE