Static task
static1
Behavioral task
behavioral1
Sample
fe27d452972f801ba5774233ebb751b5_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe27d452972f801ba5774233ebb751b5_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fe27d452972f801ba5774233ebb751b5_JaffaCakes118
-
Size
260KB
-
MD5
fe27d452972f801ba5774233ebb751b5
-
SHA1
6563ab19d4a6d3dfcb573bbe0a8cfe781321be1d
-
SHA256
20a9e720e9cd52c4ea0889f4aa1af934aabaa26969e581cee5e93faf55467608
-
SHA512
5e071398656ac41fc0151d451df51a0276db80598c43e1096d808c15c89f1941fb48b49f174583412f6cea4fe8c32f9e2f863d23d5942b9c693db9ed4c555b48
-
SSDEEP
3072:eCFlE9gD6dSZnSFVQCNzE4CfEglyEpuNHvMKy5S7PoLPM4Ul+HryFswxc59x9H5s:hFlE9gesZUQSE7M3EcGKOS7P+LpXHm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe27d452972f801ba5774233ebb751b5_JaffaCakes118
Files
-
fe27d452972f801ba5774233ebb751b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
oqdEU975 Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XVQSBC3R Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
82JQWz0B Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vOgPg5RM Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vmV6so9f Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
82JQWz0B
-
XVQSBC3R
-
vOgPg5RM
-
vmV6so9f