Static task
static1
Behavioral task
behavioral1
Sample
826fde05cb1e4c08cee74c1acf31f2ca_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
826fde05cb1e4c08cee74c1acf31f2ca_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
826fde05cb1e4c08cee74c1acf31f2ca_JaffaCakes118
-
Size
306KB
-
MD5
826fde05cb1e4c08cee74c1acf31f2ca
-
SHA1
9a270b302671f76330bc0339f8807dee55e6510d
-
SHA256
ac86ac215d31812bd7754f9d4820e4982b7d79b054d9456afa615f7babe724ae
-
SHA512
37b8b2981e3d4c097f8fa12185e91aa6fbc1390c080199efe46ba769e4542fdfbd9969025c89663206e9a05e16ea793d476299e3e45b5b1d4bb8a1b21864e267
-
SSDEEP
6144:UCh7cuD4dq17Rj0JkqCc4JTA/0nVW5GJZ2tNYLj8MfsN3/mbXjSO3Gn:Uk7l4UxRj2v0TA/MVzYKj86sN3ubX2b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 826fde05cb1e4c08cee74c1acf31f2ca_JaffaCakes118
Files
-
826fde05cb1e4c08cee74c1acf31f2ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 136KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 146KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE