Static task
static1
Behavioral task
behavioral1
Sample
426645ef53896a50a2fee81e7aadc660_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
426645ef53896a50a2fee81e7aadc660_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
426645ef53896a50a2fee81e7aadc660_JaffaCakes118
-
Size
295KB
-
MD5
426645ef53896a50a2fee81e7aadc660
-
SHA1
dc8af6afcb9e4b2a4f7062000c3b367c93d75441
-
SHA256
02e21b077023550160a16b40b512305648dc66ad3060ef62de867508ec6be920
-
SHA512
c7537b007ada283ffc1f12d11dc878013941dc6cfdf787aa03c3629c4bdea1261689fd4fde622ac2f5b61ae45003824c77997a75fe9913cb8f255c916393f49e
-
SSDEEP
6144:rnB3lD3phBQeUSuRUlCyqUGEAfNsWjJz/WaqckKD7xkfTi+54COwUNQ0gZQh:TBB+1UWUGEQNjj9/WCm75YQ7Qh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 426645ef53896a50a2fee81e7aadc660_JaffaCakes118
Files
-
426645ef53896a50a2fee81e7aadc660_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 294KB - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE