Static task
static1
Behavioral task
behavioral1
Sample
26f65c40e652d17234aebc5b81c59e5c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
26f65c40e652d17234aebc5b81c59e5c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
26f65c40e652d17234aebc5b81c59e5c_JaffaCakes118
-
Size
14KB
-
MD5
26f65c40e652d17234aebc5b81c59e5c
-
SHA1
213d17e0da04e69998908f4eeac8867754b89b3e
-
SHA256
43a9865d07f6e0570f15dcab618f1739c51723ad37d931f5f1bf8e00c3b5c441
-
SHA512
121e332be5ad78d1de69a94ef30c08f6146087cc8a9ac7637e21c82bfbed24c60097c49302bb6284ec6720549f1d13e8e5c8634e160f17edce6f6831c610c420
-
SSDEEP
192:H6MaaJsdPIt8yctaCFLRzYQEHZxaDSv81xmnBaFxA2GaSK+NWPn:aP19yctjRa21oB+O2hSr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26f65c40e652d17234aebc5b81c59e5c_JaffaCakes118
Files
-
26f65c40e652d17234aebc5b81c59e5c_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE