Static task
static1
Behavioral task
behavioral1
Sample
426faa6ee2b4d586d7987886f59d6ad5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
426faa6ee2b4d586d7987886f59d6ad5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
426faa6ee2b4d586d7987886f59d6ad5_JaffaCakes118
-
Size
59KB
-
MD5
426faa6ee2b4d586d7987886f59d6ad5
-
SHA1
1277153308a9894a7de4cc223a33e0e38915474f
-
SHA256
85011df6e499dc11e2e5d22b55df395f7562872598bc6c64dc0966ac663b0450
-
SHA512
21600b39e3313873c6d14d642ad42d97f01cde1f0179a6d905d6bfd3bf6b64981f75150ca909d1ffe3b22147d22524ea7d91407a0ad29903c2c858d215c2c2bb
-
SSDEEP
768:IhC6CZtFARpv9T/3h7kKJtCgWYln6WZZ262VnoSlrTZSyDVx:enCZtejN/VhAylnxZ46woWvD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 426faa6ee2b4d586d7987886f59d6ad5_JaffaCakes118
Files
-
426faa6ee2b4d586d7987886f59d6ad5_JaffaCakes118.exe windows:32153 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
iyaiyjaj Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ybjabiqr Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bzijqqrr Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zziibiiq Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ