Static task
static1
Behavioral task
behavioral1
Sample
96dc2d9906372e12a8d9fdbe6eda3ff2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
96dc2d9906372e12a8d9fdbe6eda3ff2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
96dc2d9906372e12a8d9fdbe6eda3ff2_JaffaCakes118
-
Size
197KB
-
MD5
96dc2d9906372e12a8d9fdbe6eda3ff2
-
SHA1
835292abd00729941649dedb172a064dad20ff93
-
SHA256
3c39a9cc231dddf7565111271d0e2a8f747032cbf9c2530bb75928dd89688abe
-
SHA512
a1652455062b7b6c1ff2598446038875f9eefea49e09654ac923f40c9010b113cb3e0f400f3cc797a6e856386185b5d4c3e6f04b6e2485bbd43da9c5b6a2d26b
-
SSDEEP
6144:UB/0SDNrjYsuckN0OWq+kYoDfoZDRDMK+:e0SRUsb83ikpEy/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96dc2d9906372e12a8d9fdbe6eda3ff2_JaffaCakes118
Files
-
96dc2d9906372e12a8d9fdbe6eda3ff2_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 149KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ