Static task
static1
Behavioral task
behavioral1
Sample
261c4f25b801b3e794a4986d4fd5b33e_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
261c4f25b801b3e794a4986d4fd5b33e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
261c4f25b801b3e794a4986d4fd5b33e_JaffaCakes118
-
Size
3.8MB
-
MD5
261c4f25b801b3e794a4986d4fd5b33e
-
SHA1
ac9e4d7d47f0929b0c9c3b513e4ac7082b6b3b40
-
SHA256
03621f96a0e7f69ee3337cc5eac2606fd6ee1fd1aa2ace501367f2e7fd04785e
-
SHA512
c968e1496f91b01cfeea7d212405de24e8083f009f098979d86ccbf20384e7efa084d760353d0bcaeef89612d81c3404b69773a55a630e2b5be6948033f309b2
-
SSDEEP
98304:q46FMU48o02g/XNJuUGBnpC3sxqbftAsUnTitSg:+48PmBnpusxqz6sUnutf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 261c4f25b801b3e794a4986d4fd5b33e_JaffaCakes118
Files
-
261c4f25b801b3e794a4986d4fd5b33e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2.0MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ