Static task
static1
Behavioral task
behavioral1
Sample
26e0746cd3d4963d7eda31752a777564_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
26e0746cd3d4963d7eda31752a777564_JaffaCakes118
-
Size
1.1MB
-
MD5
26e0746cd3d4963d7eda31752a777564
-
SHA1
0b0223c9db322f42469d21bc9771a2a851a97b6d
-
SHA256
c42ed46b6df08f0fc9e307d117db588199443d8a0a7db45db0abd68ef143882c
-
SHA512
ecdaf12434003c71378a9008d43cd0ff41bb80192c54f27c18ab3bc83fdaec7227053790967078b01a3dbd257471d2866401be0bb81118beb106635570f96ef9
-
SSDEEP
24576:F45FEtm5KAsXWFttrWEu236/WM3oiMaAWoZHUaCpNF:FOoAA6ttrWrO7wkZHU5NF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26e0746cd3d4963d7eda31752a777564_JaffaCakes118
Files
-
26e0746cd3d4963d7eda31752a777564_JaffaCakes118.exe windows:4 windows x86 arch:x86
b5612e99c648c99574f8ebc51bb2ee42
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetVersion
Sections
Size: 286KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 856KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sadplnby Size: 654KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
orgmplxd Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE