Static task
static1
Behavioral task
behavioral1
Sample
c26301a1f0535f1cf0686856797c4d96_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c26301a1f0535f1cf0686856797c4d96_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c26301a1f0535f1cf0686856797c4d96_JaffaCakes118
-
Size
31KB
-
MD5
c26301a1f0535f1cf0686856797c4d96
-
SHA1
cbc0c40cb978ae28c7e3d528d2a8c44f6bb52cb4
-
SHA256
95dc3d8ed753b7cc9eeaee14c2be665c3d244fdc63176441e32eda9b00bb66ea
-
SHA512
fe85d7e4dbc31081ccbed75d2c9f76ef407af435b95f4606bddbda7bad708111e5bb54c98b2d363489992443ac5d1b422b8230e174de9ab82a8db5173d4259da
-
SSDEEP
768:jACPY9SGAABpj3Kufzde+DVOX7BreBjpl2vTPNMhKH+02hXn4fTtd:jACw9pHKufzdeHQdeTPe4HQXneT3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c26301a1f0535f1cf0686856797c4d96_JaffaCakes118
Files
-
c26301a1f0535f1cf0686856797c4d96_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�$Hz0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�$Hz1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�$Hz2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE