Static task
static1
Behavioral task
behavioral1
Sample
60929c550a572792d2978fc90ccac273_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
60929c550a572792d2978fc90ccac273_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
60929c550a572792d2978fc90ccac273_JaffaCakes118
-
Size
149KB
-
MD5
60929c550a572792d2978fc90ccac273
-
SHA1
eec325b25b0231ea3d5de627dfcbbfd7b1dee713
-
SHA256
70a88df9e565a9842b44d318d2d7539993ea7d364f7be29e1c2f0c0df2c1f05f
-
SHA512
c4c2463e75802fa671ad31cee5df3280a795ef3c0a9fd75112d00f68158c5af5355358f2d828d536a9246aa747ba86fea19aa3f889f070ac97464198026c9e73
-
SSDEEP
3072:mtiULldXtmNkUD90ZGU97BhBpk1/FbBJCNBK5Kh:FULldKgQUPpQbicKh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60929c550a572792d2978fc90ccac273_JaffaCakes118
Files
-
60929c550a572792d2978fc90ccac273_JaffaCakes118.exe windows:4 windows x86 arch:x86
de39dc68941cc6307e3b2590c857a907
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
user32
wsprintfA
advapi32
RegCloseKey
ole32
OleRun
Sections
.text Size: 44KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 68KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE