Static task
static1
Behavioral task
behavioral1
Sample
61d9b9406fc7b70603a169eb97e45cc8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
61d9b9406fc7b70603a169eb97e45cc8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61d9b9406fc7b70603a169eb97e45cc8_JaffaCakes118
-
Size
260KB
-
MD5
61d9b9406fc7b70603a169eb97e45cc8
-
SHA1
df9dc59c19a26324e1d033026c56acbdea14d148
-
SHA256
753b4f7285aa4a9b292e1744722411733749e3864ae6beecac9ce3170101af9f
-
SHA512
f4a8757467201d9b9224fc557c6d0736ba6b5294d22e1418843ae12c8b708344588142dce74a8ad517ac6194d2d8a7b454a543754d21bd1083cfeaab5bec5879
-
SSDEEP
3072:eBm2uazfi+TsCEElDUvLXctCQR0GxpVxBr0t82a4zd5zMtRF0FaiKNw0Ku8h9Qt6:eB5piwtRDxpVb0ra4Z5+kjKNGuJt6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61d9b9406fc7b70603a169eb97e45cc8_JaffaCakes118
Files
-
61d9b9406fc7b70603a169eb97e45cc8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE