Static task
static1
Behavioral task
behavioral1
Sample
78f7d541f6269b70aebe4a5bc5fea371_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
78f7d541f6269b70aebe4a5bc5fea371_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
78f7d541f6269b70aebe4a5bc5fea371_JaffaCakes118
-
Size
364KB
-
MD5
78f7d541f6269b70aebe4a5bc5fea371
-
SHA1
0067db2117ac92eeac4123372ee2311689ead5e2
-
SHA256
d6799f2dde7b7b185ce867731e6ed5f8efc473a452eb834c8880dd3b4d497745
-
SHA512
8e383a1389855b9173838a60fece7090c3cac599697f1b08dbad0833fa83014018ce19bde910df3d24c84b07ea5fc0f6ea7a5c8f3db029cfde0e2ec20a2abc91
-
SSDEEP
6144:G8arWVZUa63aK7bsrS9Lzw8nDOKzFEdUDVzuLaJPH5FnOxoQaeFHuoSEpl:YrWVZUa6KMbPQECKJE+F5hWoQkoFn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78f7d541f6269b70aebe4a5bc5fea371_JaffaCakes118
Files
-
78f7d541f6269b70aebe4a5bc5fea371_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ