Static task
static1
Behavioral task
behavioral1
Sample
b78db858f2baf45b6d2452a112ad0092_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b78db858f2baf45b6d2452a112ad0092_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b78db858f2baf45b6d2452a112ad0092_JaffaCakes118
-
Size
46KB
-
MD5
b78db858f2baf45b6d2452a112ad0092
-
SHA1
9477c26eeabc6118c3e12f222f144173de3ffcc0
-
SHA256
b5328f78ad32f1e08fa8649069c2808a8593cf3f6ed5d142fc7f5519d983f9df
-
SHA512
1400d31010c7c24bc2e072d89353938f650a23209da169fac38da36fc3f7c449939b721a43eec3abafd06a1a70e05ac49d3f2f7c25aa0f0f0adc1b0e49f98cc6
-
SSDEEP
768:w9qKOqqVp+5bWUBC1co5WxeRZUv25WfZUW2TU:R91zseRZM25Qn2w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b78db858f2baf45b6d2452a112ad0092_JaffaCakes118
Files
-
b78db858f2baf45b6d2452a112ad0092_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ddsdsdaa Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
aaaasdsd Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdsdsdad Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sadasada Size: 9.0MB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE