Static task
static1
Behavioral task
behavioral1
Sample
2826991684e596b429a205a2c88cddf5_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2826991684e596b429a205a2c88cddf5_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2826991684e596b429a205a2c88cddf5_JaffaCakes118
-
Size
40KB
-
MD5
2826991684e596b429a205a2c88cddf5
-
SHA1
80c2041d251dcc34ae3b202a5a0ed8f5cdd604c5
-
SHA256
39a6447a6c2ef47ff818da9cbd53d31b85d570f3f63fb1023221743e707d5161
-
SHA512
d80384317978280fc31aff5859921d6a78e6b9aea5dce781dee5c7f2fcfe2e97954a8f51ab5eec8a27d33f4a6b0c1fc810932cf7f2b13363d49e7214065812a9
-
SSDEEP
768:RD/r5AMlk858UZWzudwXZ8sAzXnNSQGZFRDeWrDv:RDz5RW85zZWz2cmXNSQybDeEDv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2826991684e596b429a205a2c88cddf5_JaffaCakes118
Files
-
2826991684e596b429a205a2c88cddf5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ