Static task
static1
Behavioral task
behavioral1
Sample
1826e1d68fd023ec68a3295f571dcd16_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1826e1d68fd023ec68a3295f571dcd16_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
1826e1d68fd023ec68a3295f571dcd16_JaffaCakes118
-
Size
273KB
-
MD5
1826e1d68fd023ec68a3295f571dcd16
-
SHA1
be8d0afbe790385cd6c36c51d51dbfa85fc5689a
-
SHA256
116ac50402c0c169e5a5c757b6fc0dca98109ea6a3647e563379f7550f227683
-
SHA512
442f4b9652e921cc736c9df3cc44a03f428a69d5326d74745a1a39a3afb7cee2bc6b6ba531e4d988c5e29b8e0416882646419925cf9a519f1b85a3af23597d45
-
SSDEEP
6144:ybObMkt1IItnPMW2BFZH6fmDvls6T+4GDp0tWrAPiUHSEHNPjNkeLw:5Mkt1FMW2BFeUs8+4up2WrAq3EtPGeLw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1826e1d68fd023ec68a3295f571dcd16_JaffaCakes118
Files
-
1826e1d68fd023ec68a3295f571dcd16_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tqn Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE