Static task
static1
Behavioral task
behavioral1
Sample
b78b4f95731b3ee7d1c88d465b692e3c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b78b4f95731b3ee7d1c88d465b692e3c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
b78b4f95731b3ee7d1c88d465b692e3c_JaffaCakes118
-
Size
734KB
-
MD5
b78b4f95731b3ee7d1c88d465b692e3c
-
SHA1
f129f7d4970676d244c1bcdf00c2c49fa9b84585
-
SHA256
d0dd1d13bd56e1fc574d1680ac93fea883f59ef8e4e94ebf5ef8769079fe2e2e
-
SHA512
83c6e1efa54545ef69f79b4d6b626f70d29a12377f1b479a0ee16169fcde6ceae0f4e7d3424e90697af64714a70269b7613d6c0f2a096b2b7d962c04f2cdf4af
-
SSDEEP
12288:UhCS3GUDHsCOFV4GzYltStyCfOFBkU17lcylSyciKg2cH4xluArSZwUJAvmQDPi6:UAS3GI1PtStmkwSrihf4xluA0AvBPiBw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b78b4f95731b3ee7d1c88d465b692e3c_JaffaCakes118
Files
-
b78b4f95731b3ee7d1c88d465b692e3c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 729KB - Virtual size: 728KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ