Static task
static1
Behavioral task
behavioral1
Sample
878cdb28858c77d6ef0a63de2cf4f698_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
878cdb28858c77d6ef0a63de2cf4f698_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
878cdb28858c77d6ef0a63de2cf4f698_JaffaCakes118
-
Size
1.3MB
-
MD5
878cdb28858c77d6ef0a63de2cf4f698
-
SHA1
539299db032f05726780abb7771f00938700f1e9
-
SHA256
73a243e11313dc45308ce2e6daa215336265ac4c424637a85c1d018d770f528f
-
SHA512
449fc4ef34f6570aa5a33d6e7659d79e8c966d17d43cf4cf943034ec728eaa1d4121132a198e509a4291101568e2cd6053546654683183ffb4e58a93bb10c7d8
-
SSDEEP
24576:GalAZeo0lU4Qjbx4QB2GAI0ztLey8Lv/pwgNJYo5Nqqa266ps:LlAbd4ct4AAI0zNwvRwgUo5NqqX+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 878cdb28858c77d6ef0a63de2cf4f698_JaffaCakes118
Files
-
878cdb28858c77d6ef0a63de2cf4f698_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE