Static task
static1
Behavioral task
behavioral1
Sample
426c9fdd58d4e0b8918f775fe2faa490_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
426c9fdd58d4e0b8918f775fe2faa490_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
426c9fdd58d4e0b8918f775fe2faa490_JaffaCakes118
-
Size
156KB
-
MD5
426c9fdd58d4e0b8918f775fe2faa490
-
SHA1
1ad5c2606aa48a5486812f47055eec4036003c55
-
SHA256
aff30ba6b1212f3f41d98357d3b57c43d9ec27e3b7199d9857f4758f79980e3b
-
SHA512
cbf271d2c62593d50205ba79289bbb0d2bb4c654a199608dcbfd523407b2cc9b9a74de7be04127abbef44777f3a254603fbed6ca635a6a2624c11f1c9e174a4e
-
SSDEEP
3072:1fqKqf6UTbQ0XOXVh06/0NEUYynNELl1RAX61qrZLnVnS:hUf6YQlZ/MY2ilfAq1IZM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 426c9fdd58d4e0b8918f775fe2faa490_JaffaCakes118
Files
-
426c9fdd58d4e0b8918f775fe2faa490_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ