Static task
static1
Behavioral task
behavioral1
Sample
61d65f159a1ca3b17b5b1ce0beed5a7a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
61d65f159a1ca3b17b5b1ce0beed5a7a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61d65f159a1ca3b17b5b1ce0beed5a7a_JaffaCakes118
-
Size
20KB
-
MD5
61d65f159a1ca3b17b5b1ce0beed5a7a
-
SHA1
55b59cad6dd351a6bf45e0f1e3b07dc56f87af95
-
SHA256
429dce4986cd823b7ec569676c4b9cb4d45cc9fec3e757fede3433001b53ee74
-
SHA512
2902050f4bc17f90d824a98fc0cf86975d2901913392b94032f0afe4d2573390f62cfee0c6385cae899b6a3496bf55878ca98d10b5915d43e25101847adb6d17
-
SSDEEP
384:BOzxkzGyyCMy8CYHXNt5IGGweu+xh0Cm3zaORLMwAif:YC38CYHXvcq3j5F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61d65f159a1ca3b17b5b1ce0beed5a7a_JaffaCakes118
Files
-
61d65f159a1ca3b17b5b1ce0beed5a7a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 65KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ