Static task
static1
Behavioral task
behavioral1
Sample
26de54e6bb767ebbbf0fbc2c8b9abad3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
26de54e6bb767ebbbf0fbc2c8b9abad3_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
26de54e6bb767ebbbf0fbc2c8b9abad3_JaffaCakes118
-
Size
348KB
-
MD5
26de54e6bb767ebbbf0fbc2c8b9abad3
-
SHA1
e32672b7588d41ef9c72d41e56f0da70fcc66851
-
SHA256
e41a06b446b9ec8cca8ec2cf659df2df03d2fa932153a2aa9e2630bfbacd3b4a
-
SHA512
1a2567c989c4dfa240da4c74aa944c7918718b2d2e1ac510d25d852e56a97736948df53fc3a649766f2f686cb53d9bc068e28d5f721cfc8eedea0df5275c6a4b
-
SSDEEP
6144:lqKh+T1EPc/MKqz0NqBXD2w8RzRFMevn4K3M6gvkMSQl:lqKhvzz0N4D2wazEun4K3M6gs2l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26de54e6bb767ebbbf0fbc2c8b9abad3_JaffaCakes118
Files
-
26de54e6bb767ebbbf0fbc2c8b9abad3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 657KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8way Size: - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PopSky Size: 347KB - Virtual size: 348KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE