Static task
static1
Behavioral task
behavioral1
Sample
26018cb0cbfb3dcd3c3bf2bacbd4f6d0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
26018cb0cbfb3dcd3c3bf2bacbd4f6d0_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
26018cb0cbfb3dcd3c3bf2bacbd4f6d0_JaffaCakes118
-
Size
125KB
-
MD5
26018cb0cbfb3dcd3c3bf2bacbd4f6d0
-
SHA1
37bcd0bbfd18e02d6970756abb9f891f0d90bd3a
-
SHA256
896d4183f1668e2228ef3258f5dd027c7e838d695c402ca8bd1f9cb38ace46d5
-
SHA512
5a3d2bf418ee6ff62560d7cada5c5096f4cb34c80a1fda6b78ddabaca7db99de044700dac9560bb32d4fbe74cd1001020b2665831fcadd501d9198e20824c8da
-
SSDEEP
3072:OQtVr991fNe/hnNALb7jV6rcbM63mQQRhF+PkO:OkVr991fNoSbjRkDRhoz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26018cb0cbfb3dcd3c3bf2bacbd4f6d0_JaffaCakes118
Files
-
26018cb0cbfb3dcd3c3bf2bacbd4f6d0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
wmhwwy Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wwnr94gr Size: 120KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rv7bzml Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE