Static task
static1
Behavioral task
behavioral1
Sample
86adac8f87800b12023fe32fd4e484f1_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
86adac8f87800b12023fe32fd4e484f1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
86adac8f87800b12023fe32fd4e484f1_JaffaCakes118
-
Size
995KB
-
MD5
86adac8f87800b12023fe32fd4e484f1
-
SHA1
7b3f606b8768f21c1ecd19169aa5510f00677bbd
-
SHA256
ca8c37a2f8ef166cdea96b3056a88e9dcf5de6cb47afeb4577114e9d39576150
-
SHA512
0fd87871fb69a6381655ed26d8d68f3f48e4dbd5b2aaef0234cfcbaa3a6ba197f5c36ed7b5a0e2ccaf5d9e369e7b8a20ad7a45dbd84f90b82313b4d0e5961577
-
SSDEEP
24576:rvpWKAdSN/vp+cOvFc3706lSjFl1W5jKLb:rRN3gGoaSjF6y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86adac8f87800b12023fe32fd4e484f1_JaffaCakes118
Files
-
86adac8f87800b12023fe32fd4e484f1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 533KB - Virtual size: 533KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 409KB - Virtual size: 409KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ