Static task
static1
Behavioral task
behavioral1
Sample
26552af1797db2fa5c2bc0016a65f7f8_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
26552af1797db2fa5c2bc0016a65f7f8_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
26552af1797db2fa5c2bc0016a65f7f8_JaffaCakes118
-
Size
76KB
-
MD5
26552af1797db2fa5c2bc0016a65f7f8
-
SHA1
e04d659ec031b04eaac08fe3928eaff0986ea5a5
-
SHA256
4dcded5cd90f34c9147312b9068fe7ab6e8f2b767537a404ab0222996eb1e44d
-
SHA512
47f0b7ea632c5ae025df85e0a2c51694defba63759f691e9877241bfe3124c5746b9356a2f83eb660140f2d0c2ed2ad7ac9128bb13181a155b7d3b5ba7712ac6
-
SSDEEP
1536:D2Qwq6MK7nRdbj134XBYb0feAOuqgL08XQ+KT:DJdRK7vqYb67qgL0oQ+K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26552af1797db2fa5c2bc0016a65f7f8_JaffaCakes118
Files
-
26552af1797db2fa5c2bc0016a65f7f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
aa6bad5b0bfecf9f9c8257e864d67fb7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
Sections
%6!7�� Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
pGk�9�W Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ