Static task
static1
Behavioral task
behavioral1
Sample
26e16b1b25bcac4957a69491d7467b09_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
26e16b1b25bcac4957a69491d7467b09_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
26e16b1b25bcac4957a69491d7467b09_JaffaCakes118
-
Size
430KB
-
MD5
26e16b1b25bcac4957a69491d7467b09
-
SHA1
66cb2baac2d59b14d2cc69b364e27fe75a3c971c
-
SHA256
66fe89f9b8497ac57fcd19b24c47ea307e1435787ac4776cf5f1184a0e84c773
-
SHA512
8d446250bac38c9a05278cf91aa1a6eca38421c40445d255f0b480ebdaaa550e9f3af98d6a66326d5f7d9f887fe74c3ced07d6e634884e56a9e164ad5ec8d838
-
SSDEEP
3072:UIqKuNk6oAqcduiNMSNzXWrCz6TPsRnDPy0D3PIj6izS:UUBAqli+WrWrwiPM+0Dw+izS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26e16b1b25bcac4957a69491d7467b09_JaffaCakes118
Files
-
26e16b1b25bcac4957a69491d7467b09_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 118KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE