Static task
static1
Behavioral task
behavioral1
Sample
26ce51b7b6b6a16318e87cb4cee9edc0_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
26ce51b7b6b6a16318e87cb4cee9edc0_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
26ce51b7b6b6a16318e87cb4cee9edc0_JaffaCakes118
-
Size
167KB
-
MD5
26ce51b7b6b6a16318e87cb4cee9edc0
-
SHA1
3a62cc5d57b17ffce64637e1aed7a4a29cd99d29
-
SHA256
0c050185a38d7f19573723f2404b69c8fee5ab3eaf0b5ee8344456f54e3a65f9
-
SHA512
b53471e42d766f339f1da15f4412c51839892d338e6e822fedf376e3304336c9c48c44f554b60bd60b61bccc2263ad4d2ac01421ddb361a2d3f982268d2fb131
-
SSDEEP
3072:h08LiNQBapp8REg1GBOg2izIrUy7wR4E8k9YMzpF6BrJMGRI4IRlhjWDVG+GBOg8:iU9NRE62Og2igUyER4Nk9zpF4QblxWDF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26ce51b7b6b6a16318e87cb4cee9edc0_JaffaCakes118
Files
-
26ce51b7b6b6a16318e87cb4cee9edc0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 162KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE