Static task
static1
Behavioral task
behavioral1
Sample
26e9745e870e3964969c7bd8c9210f6a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
26e9745e870e3964969c7bd8c9210f6a_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
26e9745e870e3964969c7bd8c9210f6a_JaffaCakes118
-
Size
312KB
-
MD5
26e9745e870e3964969c7bd8c9210f6a
-
SHA1
1648b8aec34532f8bf4000f403ec1461f2b697cf
-
SHA256
211382aa24f5a98af0c12d3b702650e00ac886350936f8160efcff1a9c3473d1
-
SHA512
70714b374459f709d2265f9739e703e3c06d26319f71a6bc8678e6e8f1a64f1b8897f521b0cd90ce9548a4b1396d859a890e631cd47a14dff2bb875e3ed46606
-
SSDEEP
6144:6FlKGsf4i7LwSnMRrbu02uJ79lsJ/3hJPtNQw5eKwY0DN3yiJFkUB2I3jWQP:8i46wz/u02uJ74J/3TDtBwY0DJFBN3yQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26e9745e870e3964969c7bd8c9210f6a_JaffaCakes118
Files
-
26e9745e870e3964969c7bd8c9210f6a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512B - Virtual size: 712KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 307KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE