Static task
static1
Behavioral task
behavioral1
Sample
d26608533bee025d4c97b74b25ed970e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d26608533bee025d4c97b74b25ed970e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d26608533bee025d4c97b74b25ed970e_JaffaCakes118
-
Size
59KB
-
MD5
d26608533bee025d4c97b74b25ed970e
-
SHA1
670f219a1ac710aff88635135b99672ca154283d
-
SHA256
b8291c164ee5a1a8eb46e756b2b08384f6be887d42d5513ae785a7410088b870
-
SHA512
038dd563fb096078fe95a026d4d9b8fb0eb6c1662baf73d01f524334c6ea95cab3eead67a508f811a133a6f12c7e5a94efe93e2384d9426708c14dacb3f4df2c
-
SSDEEP
768:Et8Y7tin8kgqfSAcEHM1Wb1VtkX0pHtHDSDr4WIB9IW6ZQXX3JJ6bFDfE5J0j:EuY7M8CfV6MbLEU64WyjeQHZQFDfc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d26608533bee025d4c97b74b25ed970e_JaffaCakes118
Files
-
d26608533bee025d4c97b74b25ed970e_JaffaCakes118.exe windows:28834 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
jybjabiq Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rbzijqqr Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rzziibii Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qjrqjyba Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ