Static task
static1
Behavioral task
behavioral1
Sample
260a7877ef540357cfd3abf6f8fff69c_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
260a7877ef540357cfd3abf6f8fff69c_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
260a7877ef540357cfd3abf6f8fff69c_JaffaCakes118
-
Size
456KB
-
MD5
260a7877ef540357cfd3abf6f8fff69c
-
SHA1
55c0e7ae631120fc908744740ca3ce7e1f0046b9
-
SHA256
30f3b5800415ed0c2df6e0149a3452d0808a1b2485021f58d9f22fffa8f2d163
-
SHA512
314a573b10572e2ba7ccdc0b26c3303d88910105e1770b3cef8dce7dd34e3de4287ca3ee9e84a5610afaa81e3b5b594d69aabe966d5050ec7ecb6a30c84a2ffc
-
SSDEEP
12288:V0/W0udYk0WSD8s93PPS+fCmcmK1UFA4ZpDWdovrpQoh:V0e0ud2We8s5S9mo+64ZpKovNQ+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 260a7877ef540357cfd3abf6f8fff69c_JaffaCakes118
Files
-
260a7877ef540357cfd3abf6f8fff69c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 207KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 1.9MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE