Static task
static1
Behavioral task
behavioral1
Sample
26c92e929cb79fdf0bfee1fe1a153cfe_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
26c92e929cb79fdf0bfee1fe1a153cfe_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
26c92e929cb79fdf0bfee1fe1a153cfe_JaffaCakes118
-
Size
217KB
-
MD5
26c92e929cb79fdf0bfee1fe1a153cfe
-
SHA1
6582c8e5878769a283f2ced304a25ed0183a6f59
-
SHA256
007d61b37196c44893fd4ef30596c618e429a83956e0c54d1289d19301b16adf
-
SHA512
b44bef49ad750c65e7f8f3860f9a5237172a603fb1926577ee4dbd1108ba5f8c725f4bea0f423060406bd34b3724116f34cfa565080dedb315392f93970973cc
-
SSDEEP
6144:9BTOSpqqoJFg4aA7PJaEDzxoMUaU22QjQvm16:OaqqooGaeD5U22QjQvj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26c92e929cb79fdf0bfee1fe1a153cfe_JaffaCakes118
Files
-
26c92e929cb79fdf0bfee1fe1a153cfe_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 432B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pmj Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE