Static task
static1
Behavioral task
behavioral1
Sample
81ee560c8675ebb4a40483f87b3d3875_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
81ee560c8675ebb4a40483f87b3d3875_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
81ee560c8675ebb4a40483f87b3d3875_JaffaCakes118
-
Size
475KB
-
MD5
81ee560c8675ebb4a40483f87b3d3875
-
SHA1
c88f16beae8bdaaaa4889febf30355a55f2d354f
-
SHA256
d9611e0cb6d1174cb8398f8059e887d9dc2cf584231072cc519ec73c2a89806b
-
SHA512
d72dd957467ad35da70efcb66c6149c03eac2147587ebbb669f21071a7f2caf4031e8920c76f6b347abb7e7641af5803d280903547724be10e59f0dc7af9cd71
-
SSDEEP
12288:tsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQi:tsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81ee560c8675ebb4a40483f87b3d3875_JaffaCakes118
Files
-
81ee560c8675ebb4a40483f87b3d3875_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE