Static task
static1
Behavioral task
behavioral1
Sample
78b03f8efaa1303c86ac7c6bbcd2d394_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
78b03f8efaa1303c86ac7c6bbcd2d394_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
78b03f8efaa1303c86ac7c6bbcd2d394_JaffaCakes118
-
Size
491KB
-
MD5
78b03f8efaa1303c86ac7c6bbcd2d394
-
SHA1
5c2c94719a9089eb4afb4ee5b7f9e20be95f7c4c
-
SHA256
faca6545313c0ef695b6da9a3a88c2ec0b0a082d95d29133b5d4cebe136fb6a9
-
SHA512
1a4c3cbf7f4a367ce464680be33ea60ad6a1f034657e4fdf502dd10da2142f693443554a578f8c0e5fedb4fe91bf7cefcbdb746f37fe21acb16252e18f006bec
-
SSDEEP
6144:UZfec9EbXDk6Rk5KJrG1VVE+I5E2EZ/UOPSe570Szp3Znmy+g46nmy+g4H:UZWtI6Rk4uVyOB06V2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78b03f8efaa1303c86ac7c6bbcd2d394_JaffaCakes118
Files
-
78b03f8efaa1303c86ac7c6bbcd2d394_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ