Static task
static1
Behavioral task
behavioral1
Sample
f26ddfb989be871d0d46e52529315be1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f26ddfb989be871d0d46e52529315be1_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f26ddfb989be871d0d46e52529315be1_JaffaCakes118
-
Size
1.5MB
-
MD5
f26ddfb989be871d0d46e52529315be1
-
SHA1
fcc16a6788c5c662ae4852933cb99ef593341574
-
SHA256
fb391ce121ef3d5c8c44d84d273b697326b0306b30b68d388f348fdf981dae81
-
SHA512
a6eedf27746209751e7096eaa73552f494f2240a0d41fe67ca3787301e6b600e8839ecd73fde0d6f5930a698003c7be9e55c00037a2a64daa84cedd2594e459a
-
SSDEEP
24576:e9dG37Vk0R07Qanm9Q43BkO4+MH+CtvNKpZedKpHIBHcRZvyvBckJeUHQD+JbXTt:lrq0R07QQmeuBxMHh34pHIJcfvcWUEM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f26ddfb989be871d0d46e52529315be1_JaffaCakes118
Files
-
f26ddfb989be871d0d46e52529315be1_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 484KB - Virtual size: 716KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1.0MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 676B - Virtual size: 676B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ