Static task
static1
Behavioral task
behavioral1
Sample
b78b68c8cd6ca972ca5d94d55bcf27af_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b78b68c8cd6ca972ca5d94d55bcf27af_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b78b68c8cd6ca972ca5d94d55bcf27af_JaffaCakes118
-
Size
7KB
-
MD5
b78b68c8cd6ca972ca5d94d55bcf27af
-
SHA1
cddc7c425c1f765e3f28b51563f55df5645af8d5
-
SHA256
56dd241a352d16ebdea56f70cb0ddc6709a8ecb9e67aacb5356c6c6a1377ba44
-
SHA512
633e83b8c8406f1b87a3c19cc680fdbc52774170c468abe4b50403fc4a32c3570e0e216a0d041cd6c63a04df60c3fe918751f94fae76af3af6b0b0cfba7d694c
-
SSDEEP
192:pOyqXgDGQi5IPBcV5AJ6FnM2Gq/bztGdFNrNJd:pOyqXgDpi3V5/YutG/hNb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b78b68c8cd6ca972ca5d94d55bcf27af_JaffaCakes118
Files
-
b78b68c8cd6ca972ca5d94d55bcf27af_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 138KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 227KB - Virtual size: 243KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE