Static task
static1
Behavioral task
behavioral1
Sample
78b7b87bdadfed3c7e40157061884a7d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
78b7b87bdadfed3c7e40157061884a7d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
78b7b87bdadfed3c7e40157061884a7d_JaffaCakes118
-
Size
746KB
-
MD5
78b7b87bdadfed3c7e40157061884a7d
-
SHA1
e59480e94552cc1b128d807e84a915c8373a460b
-
SHA256
18c313c34a8452956237070aea6bcc907674d3ddca0cf0f19e14e46e61fb3120
-
SHA512
6864025b3bc25f267dc4c2b441c1645eeabb44ba957fda3f823906b9fc6e9e200a188d5f423c4ffef55f197b8b9cd90f93474060ca6660f74245d4a1211cfe39
-
SSDEEP
12288:IWwssJ2nmdWkgcjR8/60rOzcttQ4q8Xc7Hg6juYXi5xMOIqTHpIb9WNskqt6oZ5u:SDYkba4L4TIYB/wK8nGkvCFfSQg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78b7b87bdadfed3c7e40157061884a7d_JaffaCakes118
Files
-
78b7b87bdadfed3c7e40157061884a7d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 607KB - Virtual size: 606KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MaskPE Size: 9KB - Virtual size: 9KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.gedwolf Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE