Static task
static1
Behavioral task
behavioral1
Sample
61ed86ead5fe27be5aee148fbb642e84_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
61ed86ead5fe27be5aee148fbb642e84_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61ed86ead5fe27be5aee148fbb642e84_JaffaCakes118
-
Size
356KB
-
MD5
61ed86ead5fe27be5aee148fbb642e84
-
SHA1
b6049c237bce3afb69b9ad6148bbc9179d5be185
-
SHA256
809e4d9f61ef8079ead5180ece077db4718d7360ac1566cbb9215e2c27327517
-
SHA512
105a96e8ef71056b086384db6ffc4a937f9a5c8604328a925ee9bef33d046ef8a72824fba08e3d9c0e6ed0c5cb9ddb8ab90f72021a4bd64158315d7ac8c59625
-
SSDEEP
6144:XbQ08yxkQALEf/rB6FbInCEzn5qjmMlRXsCxEgWdo2e+srEcT1:rQ0fkcDkFu1qjmURoi2e+0tT1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61ed86ead5fe27be5aee148fbb642e84_JaffaCakes118
Files
-
61ed86ead5fe27be5aee148fbb642e84_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 312KB - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ