Static task
static1
Behavioral task
behavioral1
Sample
266ae677831f1d4c0683030811029f93_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
266ae677831f1d4c0683030811029f93_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
266ae677831f1d4c0683030811029f93_JaffaCakes118
-
Size
167KB
-
MD5
266ae677831f1d4c0683030811029f93
-
SHA1
f1611409d9cd0944c8c74276e4496ca0f6c091bf
-
SHA256
4f83bba9963a2113fed97946434bc62f2cfbd75899307c4e83a559cfa9f1e9d7
-
SHA512
a3b421560a3d01a47405b6a86e17d966921fb30eb1b8181fdcdd917f3f0d807c48cc38b9b04e3e680fdd3a715d86cc23ad7d99b1f535d1e0d146d1772405d849
-
SSDEEP
3072:eY7tE473pyAf5WFgh0cg+iEBf1uFZ+DOHUw2tsDCIGSO2KYSmR1:eEK63pT5qm0T+iwuj+eUxKDCRhw1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 266ae677831f1d4c0683030811029f93_JaffaCakes118
Files
-
266ae677831f1d4c0683030811029f93_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
L3f#0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
L3f#1 Size: 167KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
L3f#2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE