Static task
static1
Behavioral task
behavioral1
Sample
127e2c88827e469c6aca0490d08123ba_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
127e2c88827e469c6aca0490d08123ba_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
127e2c88827e469c6aca0490d08123ba_JaffaCakes118
-
Size
902KB
-
MD5
127e2c88827e469c6aca0490d08123ba
-
SHA1
b877c418ecde1162c9d33a0d5f84e2c5cbf57d6d
-
SHA256
3e37146007d5023c2e5894bbaff5fb31acad33c1a225f977372d9e8f22765781
-
SHA512
e221b3ec1e5ad77afbf07a4cec4e08d41ee53a851d8b4e9d2ce06f2a583c0f0875bef460d19d92250f87fea27e1e8fb4730e91b3da8a9c51550096434ba32e04
-
SSDEEP
6144:gs833CnotE7RN8JmrwW9NaZHh6GNjb2WetjHMjz+aTTH1x2pWlPb/31j7PETOnXs:mLtE7RafLNwHwNT5xycbF3wOX397ZZ6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 127e2c88827e469c6aca0490d08123ba_JaffaCakes118
Files
-
127e2c88827e469c6aca0490d08123ba_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 88KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE