Static task
static1
Behavioral task
behavioral1
Sample
60ba21859995cc58f4c83f517f404e7f_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
60ba21859995cc58f4c83f517f404e7f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
60ba21859995cc58f4c83f517f404e7f_JaffaCakes118
-
Size
2.0MB
-
MD5
60ba21859995cc58f4c83f517f404e7f
-
SHA1
08ba459aa1703b30c438a697a1b4a928b535659e
-
SHA256
6390420606e1cc53a9b1b4e0f5de74579b0d7f8e6a5764e756a5834a6e8e4ef1
-
SHA512
0932af47841221151545548b6d8abdd312e1da29f44586025f792c1b8476c1c8464193fbd3d16a060537494622c6b2f6a2dcd4e9e73f71ead6c651d00f42db02
-
SSDEEP
49152:JTQhtsJUzvV9JlAaQWCt4oMXvQdUide+viDz372y7S7:VqFzt9ca9Ct4e5dNgzA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60ba21859995cc58f4c83f517f404e7f_JaffaCakes118
Files
-
60ba21859995cc58f4c83f517f404e7f_JaffaCakes118.exe windows:4 windows x64 arch:x64
dc12932426806b6b47a373d7ae42c21d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
mscoree
_CorExeMain
Sections
Size: 19KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mleqwish Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rooneiun Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE