Static task
static1
Behavioral task
behavioral1
Sample
61661b045187501bac7a3dce39b50cb5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
61661b045187501bac7a3dce39b50cb5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61661b045187501bac7a3dce39b50cb5_JaffaCakes118
-
Size
17KB
-
MD5
61661b045187501bac7a3dce39b50cb5
-
SHA1
ecec63d34ab72defd0e8d02dfe9afefaac0e8ef9
-
SHA256
455f4d42bd2b3431f3d3787a7411f94d57566b3bb46fc7136e108473a3945681
-
SHA512
31dbdbca32e93124f156b2aa0431a10bf71878b96ebe087d3bd4bcaf07dbe1dbfa24047da43d3644e6a49832c9d35b41291dbbd6b06a4555f2b5df0f11c8e318
-
SSDEEP
384:jkK7x2vDxsYWjTSjbqJSuV3NuKI/En9dWzlPSVcn3WfFW:4Kt2NKO0SuhNuKFIxs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61661b045187501bac7a3dce39b50cb5_JaffaCakes118
Files
-
61661b045187501bac7a3dce39b50cb5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 15KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE