Static task
static1
Behavioral task
behavioral1
Sample
87c5988fa816f4766f75ff45b2394dfe_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
87c5988fa816f4766f75ff45b2394dfe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
87c5988fa816f4766f75ff45b2394dfe_JaffaCakes118
-
Size
12.8MB
-
MD5
87c5988fa816f4766f75ff45b2394dfe
-
SHA1
a283bc3c3b1a2b2da1c6a6da55d0eb5b82e0f4e6
-
SHA256
efb82221f119e7e6f582fe1cb0890c2f29731150e4cbf98081e0621600d14d7c
-
SHA512
eabdafd3907a6ec1cc6a22700e5917e03eb1028b4e05c300f87fc7e2512ffbcd18c09f2feed38d376edc5d1de08bef0dd8b73c8bcca7ccdf457a685f36edccdf
-
SSDEEP
196608:F2wEAZZ/2O9cVoZ2WY4H19UwGJXOYOXpch6:F2Y/5cs2q19UwGJXFOXpcU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87c5988fa816f4766f75ff45b2394dfe_JaffaCakes118
Files
-
87c5988fa816f4766f75ff45b2394dfe_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 997KB - Virtual size: 997KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11.7MB - Virtual size: 11.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ