Static task
static1
Behavioral task
behavioral1
Sample
81555d120344163daa24d0242ac75d18_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
81555d120344163daa24d0242ac75d18_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
81555d120344163daa24d0242ac75d18_JaffaCakes118
-
Size
1.5MB
-
MD5
81555d120344163daa24d0242ac75d18
-
SHA1
17e3a6f2eb281d5818dccc73f381f99b99c0d578
-
SHA256
6a26268020115aa0c16fc5a95641a708bbdc1bdcd672a84a642ad0e0ef82304c
-
SHA512
360f7a2c6176796be001fcd1fda9d96821bf9a1e5be21a97ab15faa54b3a2de8df57a6d9b179c4e87f168eeea861041ecf587ca465c9b9dafa12df35b20fd21f
-
SSDEEP
12288:zajhG8acPbGRvhEazknKZjbpUwhBMy+49U+pnz15n:zajhhavF2yZvuAzXn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 81555d120344163daa24d0242ac75d18_JaffaCakes118
Files
-
81555d120344163daa24d0242ac75d18_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
6����g� Size: - Virtual size: 592KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9B�O< � Size: 552KB - Virtual size: 556KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE