Static task
static1
Behavioral task
behavioral1
Sample
81f8063856dd7f6c6a20368056b0cd17_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
81f8063856dd7f6c6a20368056b0cd17_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
81f8063856dd7f6c6a20368056b0cd17_JaffaCakes118
-
Size
11KB
-
MD5
81f8063856dd7f6c6a20368056b0cd17
-
SHA1
1db99128b906e1a94c491a1a54ac146a8d457db8
-
SHA256
0ae980e47dbd00595c0e81693fb8a241ed787bf9ef90c3161e15cf0493245efb
-
SHA512
3783c7a2b65312d7741de07d8ecbb360b08567c2b0f06fc29ff716289b17ad011d402bff26622c52f71af97de60d19a0401491393619a18899b40c8be8ea808f
-
SSDEEP
192:glEH+Og3aRpnhsZU5AQ2lRdVVV/ngNnBBaplK/4DGRgrcvlx4kjtJj+KsWWPiS:glEpIaaZU2lbjVYNn7at9rY48+Kf5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81f8063856dd7f6c6a20368056b0cd17_JaffaCakes118
Files
-
81f8063856dd7f6c6a20368056b0cd17_JaffaCakes118.exe windows:4 windows x86 arch:x86
fa65b9de32768a75c344477e8ead5e0c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
Sleep
VirtualAlloc
VirtualProtect
VirtualUnlock
GetLastError
Sections
.text Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ