Static task
static1
Behavioral task
behavioral1
Sample
0778f16c785e2b3cd9802c8245f4f9eb_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0778f16c785e2b3cd9802c8245f4f9eb_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0778f16c785e2b3cd9802c8245f4f9eb_JaffaCakes118
-
Size
2.0MB
-
MD5
0778f16c785e2b3cd9802c8245f4f9eb
-
SHA1
430efaad2da16e067d16b0f1290d723a1093ce8c
-
SHA256
c8b3b451eff0a80cb3e68205323f2255e4a07d387f1b0f47a5d7102f6b7a0054
-
SHA512
71b5a0703f7b8d32876936dfaed38b4c406b88bf527e001714de2c446c24044ca15adcf4b36cdf1ee1c7fda15142f3953fddc5402b69e8fd0c232f741fc5c4d3
-
SSDEEP
49152:GrKtGyhvEro1E+qPw6s2d4g8jJwqWFuRADdVft20+oMnxW1/hA:GuRhuo1rbhjJKuiDdTr9yxW1/C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0778f16c785e2b3cd9802c8245f4f9eb_JaffaCakes118
Files
-
0778f16c785e2b3cd9802c8245f4f9eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 780B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE