Static task
static1
Behavioral task
behavioral1
Sample
26832b4f0d0d73d9996557010f2ab44f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
26832b4f0d0d73d9996557010f2ab44f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
26832b4f0d0d73d9996557010f2ab44f_JaffaCakes118
-
Size
73KB
-
MD5
26832b4f0d0d73d9996557010f2ab44f
-
SHA1
eba88da0da851b5ab5f3e459f6eb4b68d4d57820
-
SHA256
db377dcc0d999d95e162337cc159f8d1bf7b7ff3afe6b00c40c4a484299afcad
-
SHA512
d085e0560d47c2f737f7d69b95d3ab601ba6107e904bb9c4fc5e74dfed78745aa858a51a0b144b07d25f460e7c398f399a974a7ba016513f3ae08c0c85c6b0b4
-
SSDEEP
1536:Zv3AbWFEPhJBFhF1TJWQYmq0SnOBv/EPK:ZIbMaJ7hFSQpq0S8vP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26832b4f0d0d73d9996557010f2ab44f_JaffaCakes118
Files
-
26832b4f0d0d73d9996557010f2ab44f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RELoc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.teXt Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.TEXt Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RdATa Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edATa Size: 5KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ