Static task
static1
Behavioral task
behavioral1
Sample
618960575c70fce49799f2767b94db44_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
618960575c70fce49799f2767b94db44_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
618960575c70fce49799f2767b94db44_JaffaCakes118
-
Size
226KB
-
MD5
618960575c70fce49799f2767b94db44
-
SHA1
67048ed668ab3b1d41d5da1494f5755a95d2b1ae
-
SHA256
45f096d529c328f4014b9cdb3890b00274a33afdabfe969411b56534ba74469e
-
SHA512
66516f0da14550574dec7321b03408fb06e4803f0b7657de9bb60f8fe51857026cebb7640907a19613b7f4cf8cfc24039f6b5484fe48ecb9a6acf31cfc263de5
-
SSDEEP
3072:uj8dsis3fDsXybCcRRQp172Z5+91SH1Hy2FOfo/2BCDApnG8CtO9x6dFAyQ6ClOL:Zdsn3VUsa5sSoGBpG8CgSFnQ3Bi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 618960575c70fce49799f2767b94db44_JaffaCakes118
Files
-
618960575c70fce49799f2767b94db44_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 327KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 166KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE