Static task
static1
Behavioral task
behavioral1
Sample
26ce27536b12364a5e0cb40235a68b66_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
26ce27536b12364a5e0cb40235a68b66_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
26ce27536b12364a5e0cb40235a68b66_JaffaCakes118
-
Size
8.0MB
-
MD5
26ce27536b12364a5e0cb40235a68b66
-
SHA1
9d7f335ef2e407ecf2ea5d850bc20b88066310ea
-
SHA256
098744695ae8a98577e3d18320d1be3a01cd9794e988d51c12147d391b7a03b0
-
SHA512
91728c840c501b7131db050377bd5c12039737e438ccb02f2b7d06c83ce833f714014714f4c726a1928c29102debbc2f4162ff242ad2e31ff162ffd653159028
-
SSDEEP
12288:SXbKmpS3UpGpJ7P0TOKfp/8Mm4KT6jNod:S+mpS3+Gn7P0TOKfpBm6jNM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26ce27536b12364a5e0cb40235a68b66_JaffaCakes118
Files
-
26ce27536b12364a5e0cb40235a68b66_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 369KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ