Static task
static1
Behavioral task
behavioral1
Sample
789f64f7378ebf8c8071c740b4d3a12b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
789f64f7378ebf8c8071c740b4d3a12b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
789f64f7378ebf8c8071c740b4d3a12b_JaffaCakes118
-
Size
360KB
-
MD5
789f64f7378ebf8c8071c740b4d3a12b
-
SHA1
01fb30e87d6e51a12cdac73d79b7b888c29260de
-
SHA256
fa8db0d78fb01e517c1b406c3a8ea9f233b0c23441307b839bf1a931fb5472db
-
SHA512
100307e35b1213a996eae5e786b805157a51dc33e2ca4953c8196ec70d8edd3b635bcbe497eaa6c29b1f0feee79bbd607781a3ec95742f300f47883f0b592c61
-
SSDEEP
6144:dOo1ps69QRWOvfhQvhxT6CDzZS8iYeiv/theY+rOSqvtTHyHDw/6xxEmTcs7KNSN:Eo1ps69QRWOvfhQvhxT6CDzZS8iYeivQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 789f64f7378ebf8c8071c740b4d3a12b_JaffaCakes118
Files
-
789f64f7378ebf8c8071c740b4d3a12b_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 348KB - Virtual size: 345KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ