Static task
static1
Behavioral task
behavioral1
Sample
c78bc0585669dcc3e028400fe63d30a6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c78bc0585669dcc3e028400fe63d30a6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c78bc0585669dcc3e028400fe63d30a6_JaffaCakes118
-
Size
392KB
-
MD5
c78bc0585669dcc3e028400fe63d30a6
-
SHA1
dbe471599f8ab09e54d62327e5c25cb4025bf758
-
SHA256
4627cec85f169a52ac2b11cd3cfecd29cca43ab4052bec2a8f1c1c783174b664
-
SHA512
7f5829c41782e0be2908033375de5afbf2a9043419bb7b67afb09d73d8f5a1e8f80897bbddd0a854b0212fac108e1769f403c6f96a83323d20a3c989a9447ce2
-
SSDEEP
6144:ZkJcfR6Ab72wSuwo1blFMNzVMFk7BQldxW3v8rviKnsXcSTtvW2Ysonn98K:WJcAwSuvHF6zOFmBgW3Yi9MSxO2Yb9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c78bc0585669dcc3e028400fe63d30a6_JaffaCakes118
Files
-
c78bc0585669dcc3e028400fe63d30a6_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 360KB - Virtual size: 359KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ