Static task
static1
Behavioral task
behavioral1
Sample
86c59958823011dc3e0b0a783b060078_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
86c59958823011dc3e0b0a783b060078_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
86c59958823011dc3e0b0a783b060078_JaffaCakes118
-
Size
919KB
-
MD5
86c59958823011dc3e0b0a783b060078
-
SHA1
6a9b4d9e13860067ef1ea22516614474652d40d0
-
SHA256
357e9f8f20d8fe301e879590f4c9c91f2459319aaef89785fcf62f64550be980
-
SHA512
846f75233b5913c1687983eb4773646b203bcd77a15b537b5243faa1328453febcb29232c1aeb0bed7bb3e5c6f696af2b75cc5b8c0afb6a848c255c17e9145a1
-
SSDEEP
24576:O2chXEgYJoRNNTQQ1ldiVTzqiCZ+8Pg5Be:O2c4onl5epzqiCRPg5Be
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86c59958823011dc3e0b0a783b060078_JaffaCakes118
Files
-
86c59958823011dc3e0b0a783b060078_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 369KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 364KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ