Static task
static1
Behavioral task
behavioral1
Sample
26ec5c2cfab3c45c303f4e1a13ffb5e6_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
26ec5c2cfab3c45c303f4e1a13ffb5e6_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
26ec5c2cfab3c45c303f4e1a13ffb5e6_JaffaCakes118
-
Size
66KB
-
MD5
26ec5c2cfab3c45c303f4e1a13ffb5e6
-
SHA1
bd2cd8b1b678d59079df0c6ad84f2ed75199a41e
-
SHA256
6a6b7aff473854e52a41ca08e6343adcf20f120b66e12b06dd8f63c6dbd0d8f0
-
SHA512
80db0cb55b2239cd1d4668ba7cdc76dc1140a060bb555ac2f31fc75d7764db66a46b5e7a89add167cb2f0fc5d47bbbb65e15dc6ff0dba8413682969f5487807e
-
SSDEEP
768:+dSXORX1wupOEaWZJYtyEV79d8LSK63NZELtEMJMhuLKf8t:+8+HwwaW5EV79dySbuPaYKkt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26ec5c2cfab3c45c303f4e1a13ffb5e6_JaffaCakes118
Files
-
26ec5c2cfab3c45c303f4e1a13ffb5e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 338KB - Virtual size: 337KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ