Static task
static1
Behavioral task
behavioral1
Sample
226e786e361fc7c9987dd0aa00bdb9a5_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
226e786e361fc7c9987dd0aa00bdb9a5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
226e786e361fc7c9987dd0aa00bdb9a5_JaffaCakes118
-
Size
157KB
-
MD5
226e786e361fc7c9987dd0aa00bdb9a5
-
SHA1
2a5841826268847589f400d2879bdfd5b9f46f4b
-
SHA256
f8266b5037b122b38f1e79084c3f70473088aabcdf803ef33d18a62fdd6e38d8
-
SHA512
9b6f1a19bbae073366d8011505e74d6f1808771b2865c4264eda830ced357f846de81ebf4b7fe1ca8c2c2bb44ee016a5734368217477b0c240ef64c40d31a689
-
SSDEEP
3072:nUK3b4ZOipnKOPD663sknbfQBxY/o4JXQ1MsNSkSYfbS/NhxDNHCD:UqQOer+1kn0Bx5d1M9RqcNHI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 226e786e361fc7c9987dd0aa00bdb9a5_JaffaCakes118
Files
-
226e786e361fc7c9987dd0aa00bdb9a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 272KB - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 269KB - Virtual size: 465KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 909KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE