Static task
static1
Behavioral task
behavioral1
Sample
81cbdda3ed0bfa145d14432ab4f876d9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
81cbdda3ed0bfa145d14432ab4f876d9_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
81cbdda3ed0bfa145d14432ab4f876d9_JaffaCakes118
-
Size
806KB
-
MD5
81cbdda3ed0bfa145d14432ab4f876d9
-
SHA1
735f943655c5d92cf0609bc08e1637fd97175785
-
SHA256
d2149ccf1d29d043a1b9fb989e60a7adce2a77569f2ab2b3fee79c35bfee5c42
-
SHA512
56d1ecdef88bd19ba8869642c9fb4927d87f46665a5c478c68eb5d5d39ee5d261278257a0283d4aa1306c67c771e339afbfe08fe0568be9f0cec1265da7bf927
-
SSDEEP
12288:mLRj4GSpMvK6KPGATxeoVOJeLeoAC4I5zfnyp75lunMa4ni0jAq7pVxnsWEBvJB/:oM56G9eteCoXnyB5lxb7moQxd9mZs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81cbdda3ed0bfa145d14432ab4f876d9_JaffaCakes118
Files
-
81cbdda3ed0bfa145d14432ab4f876d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
22deaa3e5166e3019a02358581c9a9ee
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
_lopen
ExitProcess
user32
MessageBoxA
shell32
ShellExecuteA
Sections
Size: 644KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.3333 Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE