Static task
static1
Behavioral task
behavioral1
Sample
61441f863a26d01ed679aa43162bdf33_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
61441f863a26d01ed679aa43162bdf33_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61441f863a26d01ed679aa43162bdf33_JaffaCakes118
-
Size
1.5MB
-
MD5
61441f863a26d01ed679aa43162bdf33
-
SHA1
be7fc8bf09c7527fd16370d3d5e32b90b9b1136e
-
SHA256
5b6c52717b2140af62770c6949d6692ecd56822f599f6e5d4c86cef254974738
-
SHA512
7fba8ef953d6b66d313103c5247aba5d864824b8f769f58c013f09a9e8ead04eb4d4e760d30af24ab53009ba4f4f242d641cad18c050312b1982d205de7c987f
-
SSDEEP
24576:7ymh40r/2B9nDmGpjj6DBJDChUbXFIklYTk1IN93atpCGckbgiDgD+E+CG:MBIRJDChUbXypTk1IvatpBckbgiM+9CG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61441f863a26d01ed679aa43162bdf33_JaffaCakes118
Files
-
61441f863a26d01ed679aa43162bdf33_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 636KB - Virtual size: 636KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 532KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ