Static task
static1
Behavioral task
behavioral1
Sample
81c9eff3fbe72b983ab2c52dd7183fe6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
81c9eff3fbe72b983ab2c52dd7183fe6_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
81c9eff3fbe72b983ab2c52dd7183fe6_JaffaCakes118
-
Size
1.4MB
-
MD5
81c9eff3fbe72b983ab2c52dd7183fe6
-
SHA1
7e518445497609960ff3ce0c79cd01682295acfc
-
SHA256
6821de637a9c0a7388c6b9ee34ca8843fd259b9b027e6af27615d122e7e77c11
-
SHA512
758e0f7a6d8ffe354a4af33cc7b05194a39d448ab9786cd2b7fb6ef8921a9d77e471c5662b43d4b60d60843389f8e55ac55f0e9d3ba754a511507d45aefc46ef
-
SSDEEP
24576:x74qXU1nEcmn2YlaIbg03q7mRawAiiX8H3E21zKbt51:x77k+n2Y8Ib27mRaLVqEqGt5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81c9eff3fbe72b983ab2c52dd7183fe6_JaffaCakes118
Files
-
81c9eff3fbe72b983ab2c52dd7183fe6_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 193KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ