Static task
static1
Behavioral task
behavioral1
Sample
8e78b4e0bc6781db29845dcf349bcf14_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8e78b4e0bc6781db29845dcf349bcf14_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8e78b4e0bc6781db29845dcf349bcf14_JaffaCakes118
-
Size
131KB
-
MD5
8e78b4e0bc6781db29845dcf349bcf14
-
SHA1
354343153497fd507d9b1849feb1f1ed8e1e8999
-
SHA256
065146756726d0aa5911bfd087ace1d8c4ddec775b4ded03b76e01795219b668
-
SHA512
57f409b3185ff65d54467b4740d00b9112db67e88d14987b6f3231dce570c7477fdc5f05735b287809a7ed1d10a59e02ba90f2ac64c066ce35dc51618b823205
-
SSDEEP
3072:8FyPtMvIfneu/JwOs535lOJ8NoV7qZxpTy1HpA2+:eyFYIfeu/s535FQq/pTQA2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e78b4e0bc6781db29845dcf349bcf14_JaffaCakes118
Files
-
8e78b4e0bc6781db29845dcf349bcf14_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
yjnjp5 Size: 512B - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dzel Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cs4 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE