Static task
static1
Behavioral task
behavioral1
Sample
261b4f58302007aec59fa2066a5d1228_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
261b4f58302007aec59fa2066a5d1228_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
261b4f58302007aec59fa2066a5d1228_JaffaCakes118
-
Size
22.9MB
-
MD5
261b4f58302007aec59fa2066a5d1228
-
SHA1
cdbc34fb8004bf411879b6d32d093c4451bf1d4e
-
SHA256
c76fe448bd466fef96da7e66246126b0ebd3f9ff65f58cfeef7c5ee229c81850
-
SHA512
518db7823b2dbe76047254cc9cec170b321a77c61216d0a859e6332764c0abef8a42815999abb0361218fce988431f71f00e4c1f38ed15488ae9ed37bca39c70
-
SSDEEP
393216:MuUNLuuXBZreTFI0hntiyqkHSmo38ZaMUodE0GUCXOUW3D8hf83RI+W6bYMHhOhy:UuuXTexDiyqkHSmo3Ca6qsohfKI+W6bB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 261b4f58302007aec59fa2066a5d1228_JaffaCakes118
Files
-
261b4f58302007aec59fa2066a5d1228_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 972KB - Virtual size: 972KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 6KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 36B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 310KB - Virtual size: 309KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ