Static task
static1
Behavioral task
behavioral1
Sample
61524f5515516fc7abdd7bd2405abbd5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
61524f5515516fc7abdd7bd2405abbd5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61524f5515516fc7abdd7bd2405abbd5_JaffaCakes118
-
Size
203KB
-
MD5
61524f5515516fc7abdd7bd2405abbd5
-
SHA1
bef9aedba5fca637d73226da5c229bbfbe332c2c
-
SHA256
490bef057baf9a1d7d0050b83365af9e5145998f5aac4e743f1d5f0ae5f6485c
-
SHA512
ff4f512acfb90b9583f62653f15347df4e73dd43b75d520e0ad6c05c9374af48cd7e52ab0d3c81afa12f3b5cd12970e17d5e6c1a9e31c7514e26d4fb53b7ee35
-
SSDEEP
6144:jyb69UHiYG+4eHzMwvP6bQ7yMP+DE827xuG:jyOcPG+4eR6b7MP+Dd2EG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61524f5515516fc7abdd7bd2405abbd5_JaffaCakes118
Files
-
61524f5515516fc7abdd7bd2405abbd5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 61KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 996KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE