Static task
static1
Behavioral task
behavioral1
Sample
60b7b32457e4196cf8fbe689c5ff64b3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
60b7b32457e4196cf8fbe689c5ff64b3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
60b7b32457e4196cf8fbe689c5ff64b3_JaffaCakes118
-
Size
1.0MB
-
MD5
60b7b32457e4196cf8fbe689c5ff64b3
-
SHA1
a159afb938193c668a9659d6e5b2eb627e56a071
-
SHA256
e8c88dd2c2ec743d1799cb5b8d7ba33e2b0c6d82b7ffff2d4c2e77723aa7c1a0
-
SHA512
18fe9c5d91e8e122c542c4389d3133e3ef215c01ecfe347bba584f372863e600896195fdce20375c4f21ffa675be87a0dad33e228895e4e171144d72a847be6d
-
SSDEEP
24576:Cn+J3X1cBoXwhjl1NVA/GV3MPWdF8UW30:C+p1DXajla/SdFn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60b7b32457e4196cf8fbe689c5ff64b3_JaffaCakes118
Files
-
60b7b32457e4196cf8fbe689c5ff64b3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 308KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ