Static task
static1
Behavioral task
behavioral1
Sample
81c3ba4d8e5242327c5695453fb197cf_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
81c3ba4d8e5242327c5695453fb197cf_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
81c3ba4d8e5242327c5695453fb197cf_JaffaCakes118
-
Size
41KB
-
MD5
81c3ba4d8e5242327c5695453fb197cf
-
SHA1
843ea522569733ebb57539f7e63c2c8d24deae4c
-
SHA256
652c519839d52bcf943a8e75c486a1ac546be4ebfdcc5f75996aca92bd38ec98
-
SHA512
60776cb134e6b7f32fe757ec4ced6709fcc1d10b4a50d881f9c2450e9dcbb173e8d533ce7241d34dc83e98b1adf09cce4ec2568806e1f90892703a12e7434d24
-
SSDEEP
768:pjl2DPZbVTk3bqtaElJgs9DJ6IStG3x7RZb1UmfScp8Wt08DX0inGrkM5:Fl2DxpMbqQsZnStG3dRt6fSDjlM5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 81c3ba4d8e5242327c5695453fb197cf_JaffaCakes118
Files
-
81c3ba4d8e5242327c5695453fb197cf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
"e'#.=C" Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
#C2"*AEf Size: 40KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE