Static task
static1
Behavioral task
behavioral1
Sample
266c89427f349a70f19e0cb5467c86b9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
266c89427f349a70f19e0cb5467c86b9_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
266c89427f349a70f19e0cb5467c86b9_JaffaCakes118
-
Size
308KB
-
MD5
266c89427f349a70f19e0cb5467c86b9
-
SHA1
8a6f3108d4e3b897f760514bd2a5969c3dfed388
-
SHA256
15cb49af46219d03b15f47a97e2dffca1df2f23cda77e46f7656b90496e4a317
-
SHA512
69cf6cbf98ed1de624dbb9e129f98097a6e0b93738cc776e5236ffaebd13f48bff7eae833d505fe4ab3bf66c2377f41075f1bfc63519681897c58a9509e33da9
-
SSDEEP
384:U9v86QV0zwUou5aAORZNJCryV8wIdzqZyJdODcfb:lq8Uou5uRZ7g3/dhcD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 266c89427f349a70f19e0cb5467c86b9_JaffaCakes118
Files
-
266c89427f349a70f19e0cb5467c86b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 220KB - Virtual size: 453KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 30KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 34KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.giunzjc Size: 8B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.teraphy Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE