Static task
static1
Behavioral task
behavioral1
Sample
826c4d86531418cca11fd164773523f5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
826c4d86531418cca11fd164773523f5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
826c4d86531418cca11fd164773523f5_JaffaCakes118
-
Size
154KB
-
MD5
826c4d86531418cca11fd164773523f5
-
SHA1
c170116f252c66e024dfb344558c646be6ef4c28
-
SHA256
b32ce1531038d6b392e33559c2aa94a85e5e61f28250b345b975ba7ffd8d5b42
-
SHA512
8a392b2bd1d01b107498407b4d29cbd718bde6c73b53cad4f5f11351ee9a784f7ad64683d79246d4f46b5940a6221bec12286c931fb18a65f4fd09f12b90ed21
-
SSDEEP
3072:z1Diqfc//////eFIea2wTBILNmJ2NdmM42nj/+sWaPVFsNY0a/LZClX:zgsc//////eFtTNmOoMZRWiTZClX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 826c4d86531418cca11fd164773523f5_JaffaCakes118
Files
-
826c4d86531418cca11fd164773523f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 122KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ