Static task
static1
Behavioral task
behavioral1
Sample
87cc80f5a310d9c5feea28666519ddb7_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
87cc80f5a310d9c5feea28666519ddb7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
87cc80f5a310d9c5feea28666519ddb7_JaffaCakes118
-
Size
4.3MB
-
MD5
87cc80f5a310d9c5feea28666519ddb7
-
SHA1
30fbcbde2ce9a02cbb4935b181c5bc44ddecaa5a
-
SHA256
336de5b761e91ca874daa1fdd8e63811a4dda629951e62a009dbf57327563ddd
-
SHA512
41f1cc4751ad709626e969d7df4d0d0753b885829c36e80fcec1a9f93126dfee55f252c85e38ac215c1bea95b38fce0e854b52bad245179a101a16785bb36ca5
-
SSDEEP
98304:hPLw2gG/i3/R80WR0DI6wjaki1keKUIUj:Jw2t0tWRCwmkisUj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87cc80f5a310d9c5feea28666519ddb7_JaffaCakes118
Files
-
87cc80f5a310d9c5feea28666519ddb7_JaffaCakes118.exe windows:4 windows x86 arch:x86
f35da0feaeb1ea3121dbe4b43d43d5fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntExA
kernel32.dll.
LoadLibraryA
Sleep
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE