Static task
static1
Behavioral task
behavioral1
Sample
26f8598181060211c8111b94250c4207_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
26f8598181060211c8111b94250c4207_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
26f8598181060211c8111b94250c4207_JaffaCakes118
-
Size
905KB
-
MD5
26f8598181060211c8111b94250c4207
-
SHA1
42f7cbeabfa182f552ca0cd4dc6eb11788663350
-
SHA256
4518442218f8ef357eebe0b8a742254558b2ba33131c51943d2855d339c41ffe
-
SHA512
60c8b3a608ec209b7e6fb2420c42dd7f104f19662e80d6382a6402e575f9f8672d920827a4a11986ac5e4de750fb9e8c731ba39c8362367c8ff72a0312864465
-
SSDEEP
12288:ViT97/VGhsGvw1K1fKIKvLnBCq75vgXZZ/FXvRDuQTKsewWC:UpqsGvwSftKDb5vgXZZZR5Aw5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26f8598181060211c8111b94250c4207_JaffaCakes118
Files
-
26f8598181060211c8111b94250c4207_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 483KB - Virtual size: 483KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 211KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ