Static task
static1
Behavioral task
behavioral1
Sample
87476a0017742dc0d543affa9a963da0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
87476a0017742dc0d543affa9a963da0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
87476a0017742dc0d543affa9a963da0_JaffaCakes118
-
Size
494KB
-
MD5
87476a0017742dc0d543affa9a963da0
-
SHA1
b3b7716475dbf84b77396fb1c0cfce138e8507f2
-
SHA256
426934925e926fffec9c64a3779f07e118349a558476471f623740956258fa38
-
SHA512
bfff2a0761ba5552b1d4af9118c4eaa834dec072b49b73ae90e1ba83b79b9fab16d13700059666094fd7c2849448e55a0406832fd54a374af5f8c12b5bb9af5d
-
SSDEEP
3072:K+Q8wJno2Lr+Q8wJno2437DTEClZ+Q8wJno2xv8LXwoEJ8WQ+:blw9Mlw9YDTEClklw9P3WW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87476a0017742dc0d543affa9a963da0_JaffaCakes118
Files
-
87476a0017742dc0d543affa9a963da0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 461KB - Virtual size: 461KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ