Static task
static1
Behavioral task
behavioral1
Sample
078b04ddda098762580866acd99d35eb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
078b04ddda098762580866acd99d35eb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
078b04ddda098762580866acd99d35eb_JaffaCakes118
-
Size
82KB
-
MD5
078b04ddda098762580866acd99d35eb
-
SHA1
343f82af3fa6f507e513e5fc205d6db256e0cdd4
-
SHA256
bb9108ea899ed2a1eeed1a0f3fd5284c62f696d81e9e89a3fad29ff9a7bc4293
-
SHA512
4044960afdefad24cbb1aa7ab78633bae454dbccf71437109413ad9230fac06ffd4754cb257d4468c2bebf03ef388fc2843b1c24e473d846e801dfe714ed4294
-
SSDEEP
1536:nhA+TCv692+wd5/wqGOhUZAk5a0YF918HMQ57XXU9Yvt0/LKsmPvBTwEM:nhA+CFKOhUZCF96HM0XU+aDe5UEM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 078b04ddda098762580866acd99d35eb_JaffaCakes118
Files
-
078b04ddda098762580866acd99d35eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 42KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 199KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE