Static task
static1
Behavioral task
behavioral1
Sample
0e26ea727f23fa8a48bb80bedc17023d_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0e26ea727f23fa8a48bb80bedc17023d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0e26ea727f23fa8a48bb80bedc17023d_JaffaCakes118
-
Size
295KB
-
MD5
0e26ea727f23fa8a48bb80bedc17023d
-
SHA1
495dc4a76ac607e429952af03563c2e12d70589f
-
SHA256
5bca731b306344081990dbaf559d9cd892b7e5eb04e8a31dc53ffc26e96722e1
-
SHA512
cb0d0abb9c67f7176dbf5f07e2278d77381c9073419d3bcbda02cff5ede38fc45c4a5b1f06b880ee9826a9023d2e8323e7dfbe62054fe9421993f6592c9e8e66
-
SSDEEP
768:eL2YeYgLBFQa/Mn5Jd4K9s+p29FP+HBmz2I7UFohsU5Y:eL2YeVLrMXOK9s/9FP+hmzIOX5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e26ea727f23fa8a48bb80bedc17023d_JaffaCakes118
Files
-
0e26ea727f23fa8a48bb80bedc17023d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 216KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 30KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 33KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ioixvri Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE