Static task
static1
Behavioral task
behavioral1
Sample
87bf10d6d66e142767d75a0363c571c9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
87bf10d6d66e142767d75a0363c571c9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
87bf10d6d66e142767d75a0363c571c9_JaffaCakes118
-
Size
281KB
-
MD5
87bf10d6d66e142767d75a0363c571c9
-
SHA1
0c9c24c081f701664fb2c916462e779d4aa6c0d9
-
SHA256
52f55a629bdb84c78c96f5ed0849c8b7a255123be51ce3764cdcdc6d94e0939b
-
SHA512
11df703de0d19e5277e3956aed4d904ef0dba7e4189e19f6cc5a18c055faf7deab61c2b02dfeed0ae2054450ad1ead8df8519152c9d19d92d32d25836099cf4e
-
SSDEEP
6144:j0kQiaT4StZXmiT+9gofgEqzDNcyBCpl0hdcqfatwFhzRQp4Edx:gkQZzpCgEqzDeNI0qyWhRQp4u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87bf10d6d66e142767d75a0363c571c9_JaffaCakes118
Files
-
87bf10d6d66e142767d75a0363c571c9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.ling Size: - Virtual size: 780KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 280KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE