Static task
static1
Behavioral task
behavioral1
Sample
61c418047e8ce64d1fadb2c7f5a39225_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
61c418047e8ce64d1fadb2c7f5a39225_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61c418047e8ce64d1fadb2c7f5a39225_JaffaCakes118
-
Size
19KB
-
MD5
61c418047e8ce64d1fadb2c7f5a39225
-
SHA1
6ad6c07e2598e0c45273afe9e632076afa5413fd
-
SHA256
869401f2e67333cac913864f38056c782efcd99017a32efe8d20b569b2979b3e
-
SHA512
c86793cc0724930365d369856c6dce8e61209efec642893a74c79cb9bdbdd460a794958f0c7ebedf93bb071125704c659ba11e1d5577c7eb1d6c3b0bd05b6fc9
-
SSDEEP
384:mmNAGOuezYBMil/gIa5OgTHnz76+926TWC0BhsdHHVZN2QW8MBtDd:GrzYaM/XaIG76A04VbpW8MnDd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61c418047e8ce64d1fadb2c7f5a39225_JaffaCakes118
Files
-
61c418047e8ce64d1fadb2c7f5a39225_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
pdata0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pdata1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pdata2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pdata0 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ