Static task
static1
Behavioral task
behavioral1
Sample
078985f4f72c00b78337177b2cb20839_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
078985f4f72c00b78337177b2cb20839_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
078985f4f72c00b78337177b2cb20839_JaffaCakes118
-
Size
69KB
-
MD5
078985f4f72c00b78337177b2cb20839
-
SHA1
9b83dc2aa88a5f4c358007751bb4817d9ab596a5
-
SHA256
cdc539e98e7e2ee18333881072d016078bdfffe099d952d96fe7074a02f3aa65
-
SHA512
c1159e93a16b53055bfce5704ce73dcec07a8c31d4386e5142e97eaa847ff04cb50db1913c2e1ad545fe9ae6220fd1065174636b74201d3b80f0ff49198b8799
-
SSDEEP
1536:JHgNb4xknRlc/62LS6JEvDzXvgsrlyfl1w:+5Vlc/62LS6arzf/rlul1w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 078985f4f72c00b78337177b2cb20839_JaffaCakes118
Files
-
078985f4f72c00b78337177b2cb20839_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 664KB - Virtual size: 663KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 182KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ