Static task
static1
Behavioral task
behavioral1
Sample
b96d6f279eefadc88d9356983cb5103b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b96d6f279eefadc88d9356983cb5103b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b96d6f279eefadc88d9356983cb5103b_JaffaCakes118
-
Size
129KB
-
MD5
b96d6f279eefadc88d9356983cb5103b
-
SHA1
b0c414b68ed8e844e8236900621d5e8bf2827b3f
-
SHA256
b1b945c1f54c6c1aa72d131b3ba6fedf35bf86a2985acb5de56befcb594db632
-
SHA512
e2641a206e1432ecf388d42ef52bbb336a805a05892b00be094add8061b65f2b98495f71730d77f40a2b307b54dee9b5ef3081cb320f5c535253fecc6cadbe36
-
SSDEEP
3072:rknaMHbph1OYGKtaFROXCHVqr4s0P3IWqTEpiJ0:rkaMHb319XWq0sLpTgi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b96d6f279eefadc88d9356983cb5103b_JaffaCakes118
Files
-
b96d6f279eefadc88d9356983cb5103b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE