Static task
static1
Behavioral task
behavioral1
Sample
61e91714b3d3115fa1c43da103106509_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
61e91714b3d3115fa1c43da103106509_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61e91714b3d3115fa1c43da103106509_JaffaCakes118
-
Size
391KB
-
MD5
61e91714b3d3115fa1c43da103106509
-
SHA1
a0da48f0661bf37827d884bd0b63132c2e394fc9
-
SHA256
9a32961cb0483806292597a030ca0389decf33a57372ec59c9892048e05b6fc0
-
SHA512
7b3b0453fbea53af2f4cadcd5e408ddad9f808c3bf94f3eb8e1990351ac40d9a00aa0d4e05e51971cd84ee1f66d7040125154cd146cbbabe26e7901c1134ea0b
-
SSDEEP
6144:Z0oame6Oat/+U6wMPpfxvAX8TQc8N0y+qEtuZlIto5XI4VwtIpe8QnhOPA:Z0pme6gU6/bcc8NnTAe+oaIptuSA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61e91714b3d3115fa1c43da103106509_JaffaCakes118
Files
-
61e91714b3d3115fa1c43da103106509_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
P@j:Gq8$ Size: 512B - Virtual size: 760KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
=a09jV>W Size: 390KB - Virtual size: 407KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE