Static task
static1
Behavioral task
behavioral1
Sample
81cc19d1635f1f4f521728f4d484cfe0_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
81cc19d1635f1f4f521728f4d484cfe0_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
81cc19d1635f1f4f521728f4d484cfe0_JaffaCakes118
-
Size
32KB
-
MD5
81cc19d1635f1f4f521728f4d484cfe0
-
SHA1
fbab858e4ba185c769ac24a56ab55e0a97f7055d
-
SHA256
2b1d36cc2c7b57293ed5f1b69384454d860a8c3b2891bc830d2b2d6244685ef9
-
SHA512
3533bd66451c754b9f513c8ad83b89db96b27ba2caedd3ae14ac7b4ae35dc1d351d1bf55349f2cda6012e01db5c46c0d3c6d6b9e70523d4bd05592ddec7c5b68
-
SSDEEP
768:uaxDecNkhNAU2fVtQLFaOKBmoKcK5YkSpUHHLfLYe:dMNAU2NkFaB45Y/UHHLfLYe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81cc19d1635f1f4f521728f4d484cfe0_JaffaCakes118
Files
-
81cc19d1635f1f4f521728f4d484cfe0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PopSky Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE