Static task
static1
Behavioral task
behavioral1
Sample
26ef9a675d06e3c2b7be4be3f3623999_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
26ef9a675d06e3c2b7be4be3f3623999_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
26ef9a675d06e3c2b7be4be3f3623999_JaffaCakes118
-
Size
486KB
-
MD5
26ef9a675d06e3c2b7be4be3f3623999
-
SHA1
355fc8915024e8ca8bb41426ccd6f6ae39d14b2d
-
SHA256
6bc03303d082863b2fc6e178b2b739469eb3e2a32a68d4c014841a5338838a60
-
SHA512
73012da5507bc6a8bff2e207c691dc8d8d85c5b99e5df4d1e9357546b107fb752f8424f5d0a5a0d17b80428b515577e0eb9a82bd127fbd4ad24095286cd8fed9
-
SSDEEP
12288:KlLlUSg1Y9VOlfC7uT5/nKuj6SWljKkoe8v7sOrqqnjrDMK:KXBg1Y90lfdNPNFMjKkoe8zsGXN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26ef9a675d06e3c2b7be4be3f3623999_JaffaCakes118
Files
-
26ef9a675d06e3c2b7be4be3f3623999_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 10.8MB - Virtual size: 35.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE