Static task
static1
Behavioral task
behavioral1
Sample
26d6d41432a11c5306ecf54f5f600e24_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
26d6d41432a11c5306ecf54f5f600e24_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
26d6d41432a11c5306ecf54f5f600e24_JaffaCakes118
-
Size
346KB
-
MD5
26d6d41432a11c5306ecf54f5f600e24
-
SHA1
c64b9254e08cbfd612e79d9a169812e5271d9647
-
SHA256
e4f77bd149b56fcd5d2fc69006c3666645fb2d3921e335f508d9c61c669bfb6b
-
SHA512
e81a18321ba2184e27807617f2db9b81b2af712c8acfcfd8ad903e15983a29bf1a21fc774f9170c2a669c1d79e0db68674e172db502a6f82e9392d573eaa7c89
-
SSDEEP
6144:SGV+JkgllNLdLNMfl7d+3RTGPOZEfzss78WCYyi+HELi9Rj0odClx/4HdyZSayjd:lcLdLN45+BT0rr97/fLi3kxAHdsSns4L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26d6d41432a11c5306ecf54f5f600e24_JaffaCakes118
Files
-
26d6d41432a11c5306ecf54f5f600e24_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 468KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 345KB - Virtual size: 348KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE