Static task
static1
Behavioral task
behavioral1
Sample
60d9d31b3e26b8a462c81a645fa89136_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
60d9d31b3e26b8a462c81a645fa89136_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
60d9d31b3e26b8a462c81a645fa89136_JaffaCakes118
-
Size
1.4MB
-
MD5
60d9d31b3e26b8a462c81a645fa89136
-
SHA1
deee2cd2b1b0f8c90ad6374cf0a557dabd8a2149
-
SHA256
44738c0f3b0dfd53e2eefc8fbe64501bb66826c390b55446000d030a18051c60
-
SHA512
2c04c569e3c69a3ae20dae0dfe011806957b0b6722fc6d94bed3e5030d69210a5201077d6c6419d7189c92710f6408f5b5c6b2900f5f80451b50bb2d55d12513
-
SSDEEP
12288:R0S88yyKoaNcGNQrEoKgZh0kduAfcY/8+0lQ4eYQaEZOwbWxorbVsJysuObURgtR:id96rEg41VQ4eYJwb9XsuTHKup0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60d9d31b3e26b8a462c81a645fa89136_JaffaCakes118
Files
-
60d9d31b3e26b8a462c81a645fa89136_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 564KB - Virtual size: 564KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zd6.odxn Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 379KB - Virtual size: 379KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
okac8gtx Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gwlpe.na Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE