Static task
static1
Behavioral task
behavioral1
Sample
61e0dc9f1a8accc44f61c9ed38b1651b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
61e0dc9f1a8accc44f61c9ed38b1651b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61e0dc9f1a8accc44f61c9ed38b1651b_JaffaCakes118
-
Size
232KB
-
MD5
61e0dc9f1a8accc44f61c9ed38b1651b
-
SHA1
154dbfc2531559a40b8fcc501d79d49df17cc30e
-
SHA256
55379be00867e62d14e56f40d7a5eea719562006a2abadaf8a935801bc4147de
-
SHA512
501ed88a7d15730250740ce08d1a7edd0d42ae5819979ead94181d2c14a81e188416a413cfe37b75c38c903b3bde6ec94a5290a625e47d22baf496e0c9a58dc0
-
SSDEEP
768:aI+uq1WrX4sHNnYoE3VClJePhjC0nYWVINWxMquIsoSoQNLsFUO:aIP68NtYoPWhhMNWfsAFj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61e0dc9f1a8accc44f61c9ed38b1651b_JaffaCakes118
Files
-
61e0dc9f1a8accc44f61c9ed38b1651b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
9�φ�6� Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���5��� Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�5��� Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Y��n�6z Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Fdfsdvss Size: 78B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ