Static task
static1
Behavioral task
behavioral1
Sample
61bd7ba17214e93a5254253f89d92c0e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
61bd7ba17214e93a5254253f89d92c0e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61bd7ba17214e93a5254253f89d92c0e_JaffaCakes118
-
Size
1.8MB
-
MD5
61bd7ba17214e93a5254253f89d92c0e
-
SHA1
06997b41f31cefb98b9fe27cfa5d08d3501ee925
-
SHA256
e11ea56696aee36f40a7c0bd488e312c98ffdcb1f2d69ae0b567d3137c500211
-
SHA512
102ae3a96d4d058ebfe7fee35d1341aedf2cbe1bd07d6cc14fe36849f47ca80a033c3886ab92829d2b72794f0e028a31d3a2b2cccbfe744e7b3ad2c3f47f8871
-
SSDEEP
24576:0WgxYrrlOhjRQAp5TwQtdAlw0aB29N41WEVSZVs3n8QHw5AL:0WzARd9tdAlw0aB29N41WcSZW38qL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61bd7ba17214e93a5254253f89d92c0e_JaffaCakes118
Files
-
61bd7ba17214e93a5254253f89d92c0e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 626KB - Virtual size: 625KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 64B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ