Static task
static1
Behavioral task
behavioral1
Sample
87195b5f62722cfc92254fb0f9c6f0fb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
87195b5f62722cfc92254fb0f9c6f0fb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
87195b5f62722cfc92254fb0f9c6f0fb_JaffaCakes118
-
Size
1.1MB
-
MD5
87195b5f62722cfc92254fb0f9c6f0fb
-
SHA1
ff34eebfc242369bb0914ad53fadcf4bf48f4d1d
-
SHA256
ee14ea207834ce5325908fc01ace29bee772d51278488dff1a8a9442caa38d7e
-
SHA512
5b3501ddb6bc26756c9af68b84668dd8eeca07017754a026ee6f849b34110792e1715152d4284300c0c6e4a460822260e94f708c442e72cc64bb8ce798f9194f
-
SSDEEP
24576:Y0SVEY8E5u14aC9tkDm117OvEoB95Py0QCPD:Yl5i5C9tk6117h4XPgi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87195b5f62722cfc92254fb0f9c6f0fb_JaffaCakes118
Files
-
87195b5f62722cfc92254fb0f9c6f0fb_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 227KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE