Static task
static1
Behavioral task
behavioral1
Sample
61e8144770a3dc3131d70ca446027587_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
61e8144770a3dc3131d70ca446027587_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61e8144770a3dc3131d70ca446027587_JaffaCakes118
-
Size
695KB
-
MD5
61e8144770a3dc3131d70ca446027587
-
SHA1
c99aaea2aadf8d987c39072b6bba336d6fcdb63e
-
SHA256
1f06fb381d2055adeb17feb116186867f330e113f24ecff48ccc2c5b702147f5
-
SHA512
e2d5476873b5678ebab494078cdd6c64f7f5ef21751e106249f5a1c12f77de3f218f44c44ebd7035f09f11597a36b73f93573235e187aff5b792b3462548cfe4
-
SSDEEP
12288:cfet/a0Yojb641UlLB3F7hxT+zqHWDPsxrWfEF7gUNnb/VIBxWWkc:cfga0Yojb6tLF7hF+zqHWDPsxiEJgUN+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 61e8144770a3dc3131d70ca446027587_JaffaCakes118
Files
-
61e8144770a3dc3131d70ca446027587_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 694KB - Virtual size: 693KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ