Static task
static1
Behavioral task
behavioral1
Sample
987a4be7b87281c70a6d93d046264c72_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
987a4be7b87281c70a6d93d046264c72_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
987a4be7b87281c70a6d93d046264c72_JaffaCakes118
-
Size
640KB
-
MD5
987a4be7b87281c70a6d93d046264c72
-
SHA1
b2f060b53c1fc7af82a3c6e23a85da7e88472e60
-
SHA256
15d45571fd397877d5f3034a0350b8ecad462fb8fa1117f668cc6d3aaacab373
-
SHA512
1ca1e9291396411a20f32cae7d2199fa24d5b1bff68520bca8d94e63e043e0df7d85a1bcbf692f745ec495b1cfd91bd52a3b2fb80f941521f93c32af0635fa3f
-
SSDEEP
6144:E2DM81Dz8UQWt0FglF02LCMOVAAZcOLBDlBRcpN:E2DMwXxQe3l+230COR/R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 987a4be7b87281c70a6d93d046264c72_JaffaCakes118
Files
-
987a4be7b87281c70a6d93d046264c72_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 171KB - Virtual size: 580KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE