Static task
static1
Behavioral task
behavioral1
Sample
60e52da3c8f03f58ba7cb3b56b584e93_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
60e52da3c8f03f58ba7cb3b56b584e93_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
60e52da3c8f03f58ba7cb3b56b584e93_JaffaCakes118
-
Size
65KB
-
MD5
60e52da3c8f03f58ba7cb3b56b584e93
-
SHA1
97abdec7e831080e0b673b128673a881e4b06555
-
SHA256
1aa7d525235065ccb8de3a3a354b52ccefc3bc584466d09cab5f465aec48bf01
-
SHA512
d9e12ffc6ab85e3c7f78f7f645a7d0d025fdd916cbc5e4019f656e62f0d182e3e35b6f26c2ce31c86a9ac818f3ea8f62cf8c3be8f26a84fbaf75f4fd9109afde
-
SSDEEP
1536:hZnghha9ZvlNQ7PE/NBOLyIyD/xJ4W/qvWQpaWLF:33pPvNBayJDpYvL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60e52da3c8f03f58ba7cb3b56b584e93_JaffaCakes118
Files
-
60e52da3c8f03f58ba7cb3b56b584e93_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 50KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE