Static task
static1
Behavioral task
behavioral1
Sample
027dcb9294e9050187f8846b9e970696_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
027dcb9294e9050187f8846b9e970696_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
027dcb9294e9050187f8846b9e970696_JaffaCakes118
-
Size
201KB
-
MD5
027dcb9294e9050187f8846b9e970696
-
SHA1
1628f7d02c3b47cc1e79d4caae2cd916ded66ea9
-
SHA256
62e2c2a4ef7186bc5075ff804c85b1fdedd6ea0f3d252c3520d5129f2011b65b
-
SHA512
1976ac98ec29801d4d0e5397b02f461a315716059e7211db2bc99b4ab7a0c416b9a27f88b6e3d8dff54af458916d3dc2f08e3f455d33ea4665d975b5f6a0a587
-
SSDEEP
3072:Ahi+P0udvdbRhaGzFQSwc+wjetOy37ynoCdlaUEs8:ciqvdXjzwTc/wgdlav
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 027dcb9294e9050187f8846b9e970696_JaffaCakes118
Files
-
027dcb9294e9050187f8846b9e970696_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�S?|?�| Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Va?(nl� Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�2SKLM�� Size: 196KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
?ƹ��U?� Size: 444B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE