Static task
static1
Behavioral task
behavioral1
Sample
1b27c9636d77b46e3818f2c6ca10f220_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1b27c9636d77b46e3818f2c6ca10f220_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1b27c9636d77b46e3818f2c6ca10f220_JaffaCakes118
-
Size
21KB
-
MD5
1b27c9636d77b46e3818f2c6ca10f220
-
SHA1
eb2fc054e8d711b14c1287f1101e93a9dd290155
-
SHA256
8d9761556286f5b5f573b1944d007a150a872422f0c03f2673f1ac873df4870b
-
SHA512
360018671346a197c8169a3f71ea37b3675278a712c171c742f8bd182c4b6164ee2b89f54443ce280273cf42c949ac89f10209aeff2bcfb7bad92bbbdef67d9e
-
SSDEEP
384:j668Ox6jSBgUBRi++fx/BX6Wjzy/Yzka5l+5qng9sPr/MHVIRmr4nh/z07C:+O0jIBRp+ffX6/YnnpzrMH50Zz07C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b27c9636d77b46e3818f2c6ca10f220_JaffaCakes118
Files
-
1b27c9636d77b46e3818f2c6ca10f220_JaffaCakes118.exe windows:4 windows x86 arch:x86
8688ab75d42d7f46cd37705514dc4f4a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
FatalAppExitA
LoadResource
msvcrt
wcscat
strstr
strcspn
strrchr
_chdir
strlen
memset
_fullpath
_pctype
strtol
strncmp
_waccess
wcsstr
atol
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE