Static task
static1
Behavioral task
behavioral1
Sample
b78ccea34b5d09f1592badfbf5adeb72_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b78ccea34b5d09f1592badfbf5adeb72_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b78ccea34b5d09f1592badfbf5adeb72_JaffaCakes118
-
Size
84KB
-
MD5
b78ccea34b5d09f1592badfbf5adeb72
-
SHA1
32c2c5735f032624360bfe5fcea16a4ca46d982e
-
SHA256
3fbc8c797acfb54fcab4d478743b1551817c3da47181f9891fb1df1b4539f4f0
-
SHA512
7df5c51ef5ed0bb36958e95a32cfe6b2afa108308b48dd76f51498ae63bcb23fbcd02b759dee9fa2e300788a406e78dbccc3cbd67544996183b0ad5abc5a17c9
-
SSDEEP
1536:oI68jSrWFbYw5FtFI3CENRX55UxGayNyPmKKWOntkTEonrnfnZbPMb5YsD7lY:d68jSQYqvFK5NRXgQ+IXn4rnf9Mb23
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b78ccea34b5d09f1592badfbf5adeb72_JaffaCakes118
Files
-
b78ccea34b5d09f1592badfbf5adeb72_JaffaCakes118.exe windows:4 windows x86 arch:x86
a7333743ef063a68d1d860bbdf1c328e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
VirtualAlloc
Sections
AD6318C6 Size: 31KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5A521000 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
008C6BD6 Size: 9KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7B5AD631 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE