Static task
static1
Behavioral task
behavioral1
Sample
a87d4da21ef2290d4e76d47d8654c1f3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a87d4da21ef2290d4e76d47d8654c1f3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a87d4da21ef2290d4e76d47d8654c1f3_JaffaCakes118
-
Size
378KB
-
MD5
a87d4da21ef2290d4e76d47d8654c1f3
-
SHA1
81a9cd2d34d25937183e73a9f00724e6bd0ab75f
-
SHA256
db460f80db65477677beb34efc59a448a5709c5909178ec176b970528df86ebb
-
SHA512
d483d00d36639738a1225ea47a3686449d933039ad1fc5398f0c93ee2128fe0bf897422157f0652f3625a1334cc760b6a27d498347d89a2b39505ed31c832325
-
SSDEEP
6144:nZl1rLwgeY5VH0pwpMNKjfMiVt9sQEongvcG4lFIU0qU7qI0fzNA5u9JLBV9Zo:nZlhwgeY5VH0ppNKjfnrTEongkBI3qUp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a87d4da21ef2290d4e76d47d8654c1f3_JaffaCakes118
Files
-
a87d4da21ef2290d4e76d47d8654c1f3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 253KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 371KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ