Static task
static1
Behavioral task
behavioral1
Sample
426e84e2986fc0f9aa9c4da6c812cbfd_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
426e84e2986fc0f9aa9c4da6c812cbfd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
426e84e2986fc0f9aa9c4da6c812cbfd_JaffaCakes118
-
Size
104KB
-
MD5
426e84e2986fc0f9aa9c4da6c812cbfd
-
SHA1
a1db36e19ee6670f9988d55bc89a7e75723c0ecb
-
SHA256
2e4205043c703ba5b5499383d4ffbd8add5fa240f033e9acb1190962a0850baa
-
SHA512
dc964dd788115183d8895302c4f04cfb2c865cafbc9f39609ab92a244f43c2eac4f65e2f0ce1d9bdcae23444669c9dfcd82f0ec823ccf09fd812d886ce9be455
-
SSDEEP
1536:s8NC2X394iwHZ6HhxJwmafVQfkVJDjyE/9ASyzK7D1I32QXzLJOkmoh2rPWMFJOD:s8xt4fHIHhxmmafSe2E/9Az829zOfJO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 426e84e2986fc0f9aa9c4da6c812cbfd_JaffaCakes118
Files
-
426e84e2986fc0f9aa9c4da6c812cbfd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 54KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE