Static task
static1
Behavioral task
behavioral1
Sample
b78a2c2ea57a58ff3fcd08e002e421fd_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b78a2c2ea57a58ff3fcd08e002e421fd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b78a2c2ea57a58ff3fcd08e002e421fd_JaffaCakes118
-
Size
53KB
-
MD5
b78a2c2ea57a58ff3fcd08e002e421fd
-
SHA1
4ae0def2070ccc0ae138d4ad5afa8337f3853eb5
-
SHA256
be3e6e089827188681daa07e2f13dca09ec2ff5abfa44f7533274d4658266ef3
-
SHA512
57f382024f461ce8c3cc56dacf1ab5829613cad5754d13668e75ad6fc6141f6660a7a4921cd0670038ff53e93f689048d443d3c9e570dcd8ccf11f4ee36426d6
-
SSDEEP
768:8kcFyzTnHnJ0kARf4vm+RZ2xMsGUS65FrG8BeUOd87k24tU:UwrHvA+vwFrG806rYU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b78a2c2ea57a58ff3fcd08e002e421fd_JaffaCakes118
Files
-
b78a2c2ea57a58ff3fcd08e002e421fd_JaffaCakes118.exe windows:4 windows x86 arch:x86
399c9f076e8dab08a1e6586d6aa70ea4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceA
CreateFileA
GetTempPathA
FreeResource
CloseHandle
SizeofResource
LoadResource
WriteFile
LockResource
lstrcatA
shell32
ShellExecuteA
Sections
.text Size: 960B - Virtual size: 948B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_INIT_ Size: 32B - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE