Static task
static1
Behavioral task
behavioral1
Sample
026a18ccbe1763f483f7a976b84a82c2_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
026a18ccbe1763f483f7a976b84a82c2_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
026a18ccbe1763f483f7a976b84a82c2_JaffaCakes118
-
Size
396KB
-
MD5
026a18ccbe1763f483f7a976b84a82c2
-
SHA1
a1a5415b16be40d2098864b0c2a61a4926fb40ab
-
SHA256
63124b098e33791b588eaa9c0dbe49cc3305e396a1a9f220476eb57431b856aa
-
SHA512
87a485e147caaa8799a9756a00cba8ae1cfbe12d88700ffe4eb6a8a8cb8f8c27a379d7bec640028bd48e77aab665fbfab24fce5fbf3ca24f7b3144cacc63efc6
-
SSDEEP
12288:RwQzXK/lGRgOUqmq9kR6lhKXiB3a9FsqJKB57d8fsR670lN0:WQK/cRgOnmq9g6zB36rKX6UR670lO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 026a18ccbe1763f483f7a976b84a82c2_JaffaCakes118
Files
-
026a18ccbe1763f483f7a976b84a82c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 46KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 345KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE