Static task
static1
Behavioral task
behavioral1
Sample
e27e0d36bcdaa2b2d50f8b56e4e86beb_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e27e0d36bcdaa2b2d50f8b56e4e86beb_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e27e0d36bcdaa2b2d50f8b56e4e86beb_JaffaCakes118
-
Size
76KB
-
MD5
e27e0d36bcdaa2b2d50f8b56e4e86beb
-
SHA1
1507ebcb481e10bf75931941f6ed09bcaf567646
-
SHA256
8150318f4b582f603c4707b5d949fe46e83f5d1d3e9c8cd0060d665c36d3b10e
-
SHA512
a118182ffeb0a4770174a9e4e873cfa7a57e72b58bd34b47dbbde60f3a72b3e859a92da088b1d0c73f276929b462025a86339f74797a60cfe8ad7dc5a9d66dd7
-
SSDEEP
1536:VCkRbRbRbRbRpmnll35vV0aBiEH98MQRpT/Z/9c5r65NQKAxnL54rpjVrs2ryrdi:V7NNNNKnj35v1H98MQ/TZirbKk4rHs2N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e27e0d36bcdaa2b2d50f8b56e4e86beb_JaffaCakes118
Files
-
e27e0d36bcdaa2b2d50f8b56e4e86beb_JaffaCakes118.exe windows:4 windows x86 arch:x86
db0c069df15e2a668442e2824bf7e81f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringW
CheckRemoteDebuggerPresent
CreateTapePartition
WriteConsoleOutputW
GetStringTypeExA
HeapFree
GetConsoleCharType
Process32FirstW
UnregisterConsoleIME
GetConsoleFontSize
CreateMutexW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE