Static task
static1
Behavioral task
behavioral1
Sample
81c69f9e80d7893ca2cc841f2afcabd3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
81c69f9e80d7893ca2cc841f2afcabd3_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
81c69f9e80d7893ca2cc841f2afcabd3_JaffaCakes118
-
Size
39KB
-
MD5
81c69f9e80d7893ca2cc841f2afcabd3
-
SHA1
acfdf475ad6f20009e6142d76d09f98f40611bad
-
SHA256
96d9c7b28fe67d0089aeef05551f16abd1d2c9bbaa5040697826931960c1333e
-
SHA512
260df95f0b5732f46eed7f1fcd7d3299351695a778de6a71ae119f980616aabf813e0e6ed6dbd794e3d643e26c07465ae3906b12ba6a3fcd189d115d9a9fc94a
-
SSDEEP
48:aU0QArPGZrv8hv2gSuQZAyNQeHoUlEzcf6hyFrDxvmXzfQ3ak0:m9mrQ2gSuQhZ3yhmYQKk0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81c69f9e80d7893ca2cc841f2afcabd3_JaffaCakes118
Files
-
81c69f9e80d7893ca2cc841f2afcabd3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 273.1MB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 636B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ