Static task
static1
Behavioral task
behavioral1
Sample
87df1b5ec6c8e1cc5c90d79ff7384323_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
87df1b5ec6c8e1cc5c90d79ff7384323_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
87df1b5ec6c8e1cc5c90d79ff7384323_JaffaCakes118
-
Size
383KB
-
MD5
87df1b5ec6c8e1cc5c90d79ff7384323
-
SHA1
0f8a1c784d9284ad364ae928d42fcd1380f0d187
-
SHA256
bbfd17ec96df737df015b64dcb5cf76ac8a91da6575ad8738ca9fce5be7e5a46
-
SHA512
6a45bf3d222bc1a0110c7cf19db4be23fe074ab21debf779f1f21fe6adc178f0e099b1d3b98d4d5dfbef73457f6963b795417627ac37e91d108d5b1eacb5f491
-
SSDEEP
6144:9UFTAFxJozWNzW217DBB2y6+/Qr1qdHbmZYq5Ug8UhQHPAOfNj+Z/5UU42LeFc8:caq6gvUcOvnaXeCD0GdRXwOv2LJex
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87df1b5ec6c8e1cc5c90d79ff7384323_JaffaCakes118
Files
-
87df1b5ec6c8e1cc5c90d79ff7384323_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 324KB - Virtual size: 323KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ