Static task
static1
Behavioral task
behavioral1
Sample
78d396d1f82bde4341517d00b080989d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
78d396d1f82bde4341517d00b080989d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
78d396d1f82bde4341517d00b080989d_JaffaCakes118
-
Size
980KB
-
MD5
78d396d1f82bde4341517d00b080989d
-
SHA1
36a6ab225094708be59f90d99a5d4e0454aba1db
-
SHA256
177144472d807cf6ab156d181a1e27d53abea7d3bf314cdddd716932ba35e192
-
SHA512
24f526b52ad25d5ed80d78626c3a5f40b465ac5ec291d5c60937627e80d2ba0d32f932a986634fc55d2d815f9eb730f33651a1aab40a52c6fbc7ec79c62c5285
-
SSDEEP
24576:YLOkcucsllASuXCGs21dIW0AQYWntIkudJ98KXrw:YLcslCSuZQUStIk8Jh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78d396d1f82bde4341517d00b080989d_JaffaCakes118
Files
-
78d396d1f82bde4341517d00b080989d_JaffaCakes118.exe windows:4 windows x86 arch:x86
45096b1d1a27623ec1b288b8a77cd644
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lopen
ExitProcess
user32
MessageBoxA
Sections
Size: 672KB - Virtual size: 670KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 212KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svkp Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE