Static task
static1
Behavioral task
behavioral1
Sample
81c9b4fc2a0cd000c1057805c42e93e9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
81c9b4fc2a0cd000c1057805c42e93e9_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
81c9b4fc2a0cd000c1057805c42e93e9_JaffaCakes118
-
Size
983KB
-
MD5
81c9b4fc2a0cd000c1057805c42e93e9
-
SHA1
bb93bbc3b7d7c7325a22040683574acca3e4f9f2
-
SHA256
bd61103147ad5e4796e022b15a29156b939500e999bcc35bcd9e32e8a1c37fc1
-
SHA512
ae8783fef335377924d20dd161e8402e037b94b60c6c52e55a4e0122d635a3c5361dc6e1022d75faff454acb9277ee5b98c0ff30b363941e7502ec8f2d620722
-
SSDEEP
12288:D6CoOSkNlU1n35pLksHyhYW12WX3V3bHYiVopI3AHI6m1AJvjIvgQJ6SyG+3rn:DVo4YN3bkXhYWEW13bLgpI6m1YpG+bn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81c9b4fc2a0cd000c1057805c42e93e9_JaffaCakes118
Files
-
81c9b4fc2a0cd000c1057805c42e93e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 934KB - Virtual size: 936KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE