Static task
static1
Behavioral task
behavioral1
Sample
87f3f80e84939f26eacc81a8c94f47a8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
87f3f80e84939f26eacc81a8c94f47a8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
87f3f80e84939f26eacc81a8c94f47a8_JaffaCakes118
-
Size
328KB
-
MD5
87f3f80e84939f26eacc81a8c94f47a8
-
SHA1
8bbbca9cb86ea9a17cf04e26c850f0e3c17297d8
-
SHA256
08e322ed378bf14acf3630697ee5a1b1b95339fa676f6db9bb7e4c694fbdfbe6
-
SHA512
86715c7c1455e8213d25a4b30c11c9abe6009a36ded1b55bc3025a8478721490dddf6b54c4e1fa179988aaceafed7cb4699f23cf0ce7bdcc411d7cc2b8068ab2
-
SSDEEP
384:OpRanNyYPa6vwLPFYlyPO9ec9L6wtvPKpz6gxk5GOuetP4jnSlQGVJYQfWen5/:eaNyZLPzWP99ipzBMvNuneQGVPu6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87f3f80e84939f26eacc81a8c94f47a8_JaffaCakes118
Files
-
87f3f80e84939f26eacc81a8c94f47a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE