Static task
static1
Behavioral task
behavioral1
Sample
078ae6535b2cc8b0c56ca1bfdd8bf20c_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
078ae6535b2cc8b0c56ca1bfdd8bf20c_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
078ae6535b2cc8b0c56ca1bfdd8bf20c_JaffaCakes118
-
Size
1.1MB
-
MD5
078ae6535b2cc8b0c56ca1bfdd8bf20c
-
SHA1
903e815218a4199c5e1c0b25a17fcb7c810106e8
-
SHA256
5baeefc31b0add63b91dbad3864165b5b9fd170093dae7677e751f07e291f912
-
SHA512
05ffacc284758ca696c9c513040deae8ac52ca465f5c1fd6dc9893472c225dafa66397e4f26a4215c4cd2c65107fe069f79b2f9d35ada314f31391e0e2592f0e
-
SSDEEP
24576:p1bsN6xDf6wGeFiA1h5pSJqTf/hTRQ+jiYCIshl5hioLrBGyR+AcWhH9yHiJF1SS:pbf5FiAbvSwf/hli/IsxhV7R7ok1Sbe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 078ae6535b2cc8b0c56ca1bfdd8bf20c_JaffaCakes118
Files
-
078ae6535b2cc8b0c56ca1bfdd8bf20c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ