Static task
static1
Behavioral task
behavioral1
Sample
26a65bee6d5ed5aa0ea2633d17479916_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
26a65bee6d5ed5aa0ea2633d17479916_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
26a65bee6d5ed5aa0ea2633d17479916_JaffaCakes118
-
Size
31KB
-
MD5
26a65bee6d5ed5aa0ea2633d17479916
-
SHA1
7a6bedb878a7d943f6722361c72c4372fbc76049
-
SHA256
b025ff97b24accd21986d0f5f99b20eb19c419ead0829666f2cf370b2dd753d9
-
SHA512
77ba752b754efd7ef07f32558dc83dd113919900844522ff71a04d8e59664f8e314d92b902da40cb7e40c4f23ea5abc2303f5a563083dc1e0d2a6f8b5b6a8595
-
SSDEEP
768:uM1Jkf9Ywsy88v/38INJRfV4F+9oqbcf6VRbHyZvBJibk:uwPP8v/n8p6V1a/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26a65bee6d5ed5aa0ea2633d17479916_JaffaCakes118
Files
-
26a65bee6d5ed5aa0ea2633d17479916_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ