Static task
static1
Behavioral task
behavioral1
Sample
260c6c211cf190c2b1b540f21fbd6b82_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
260c6c211cf190c2b1b540f21fbd6b82_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
260c6c211cf190c2b1b540f21fbd6b82_JaffaCakes118
-
Size
42KB
-
MD5
260c6c211cf190c2b1b540f21fbd6b82
-
SHA1
00cf84fd5aa53edd80ba387765432bcb8075aa57
-
SHA256
c0eb98f726dbf01c06ce9154f237aa26a02dce5e776f61ae2653481e489bf9a2
-
SHA512
8e78c397475de4ab496b1cd714cf1f358b15f8140aef0eb31b22f55ed642ec9cfb089b16f62f0b3cf0f91dda2aee45921256f83850498577034bdb688d565c12
-
SSDEEP
768:aSFcGHIVLQnkzS0m+JIeTkxmrfwVVPrN6PB+WFCXxUL1Nchwa5zt9EBziksTgw2:aSeLQnk+1jAkCI1A+vhUBOhwWiiksC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 260c6c211cf190c2b1b540f21fbd6b82_JaffaCakes118
Files
-
260c6c211cf190c2b1b540f21fbd6b82_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 660KB - Virtual size: 660KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 181KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ