Static task
static1
Behavioral task
behavioral1
Sample
87c214d1906d0541aad0d7b3ece58583_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
87c214d1906d0541aad0d7b3ece58583_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
87c214d1906d0541aad0d7b3ece58583_JaffaCakes118
-
Size
352KB
-
MD5
87c214d1906d0541aad0d7b3ece58583
-
SHA1
28397be0b900ee3d8c33e08144d95e0e37c90df4
-
SHA256
2637db476e94f9acd28dad0f61c80f11d24934642801e0f6a30d3028e5d67553
-
SHA512
cd4e58311722aa4a945a1de027b247987467524a3297aeffb75b3b2cd39e45d307e62b6492aac02c671fa7ac6e841b23e0aca1571ed4b8ce4af5b613d16d097e
-
SSDEEP
6144:o4zWT4j+Ir0R8KmT6GqMCj6obJuqZ7flwm7cxfv0DdL7CwskqNQ0RfXPXfZJfEtz:I0jRrZKK9iFJPNwmofv0DIVkJYPv8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87c214d1906d0541aad0d7b3ece58583_JaffaCakes118
Files
-
87c214d1906d0541aad0d7b3ece58583_JaffaCakes118.exe windows:6 windows x86 arch:x86
93bd5fe51f6bad3e548a700898cc7268
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
VirtualProtect
GetExitCodeProcess
Sleep
Sections
.text Size: 342KB - Virtual size: 908KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ