Static task
static1
Behavioral task
behavioral1
Sample
60d500a326a05ea5dda34e35f647d210_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
60d500a326a05ea5dda34e35f647d210_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
60d500a326a05ea5dda34e35f647d210_JaffaCakes118
-
Size
214KB
-
MD5
60d500a326a05ea5dda34e35f647d210
-
SHA1
1427d56bb4ade3f9143de3d27a29f261c0706ea3
-
SHA256
586d828aef0461aac4eeccd1434cf4470f57e5cea8b5dc360d74705e9775e319
-
SHA512
52c41a078d27502a59cbbee995a741f8c16ef462ee0f6b91370e0de0c84029e133be31af5272b18028e629d1bab066973a57bd502c0b2c5c5ee92886789f851a
-
SSDEEP
3072:FPbNjW05nKyr4oECEy2pEApcOc+P9srwaN2UVUXnk3gtaPqhGElQvmubPdKf6IbI:F55nKmBEy2Wm9oQXPLlQVUS4I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60d500a326a05ea5dda34e35f647d210_JaffaCakes118
Files
-
60d500a326a05ea5dda34e35f647d210_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 97KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE