Static task
static1
Behavioral task
behavioral1
Sample
270cbddfe76cbbd45a7db2f053d82b97_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
270cbddfe76cbbd45a7db2f053d82b97_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
270cbddfe76cbbd45a7db2f053d82b97_JaffaCakes118
-
Size
12KB
-
MD5
270cbddfe76cbbd45a7db2f053d82b97
-
SHA1
de90afa9d5416273e4d8cbff9f7b8fa56e59e938
-
SHA256
03fd6241c6a6215d8b7a870b4b194d3b2fb092e642ec6791beb707355233540d
-
SHA512
7f2a10ff25f0137884a550a8d47230bb2443f0d745a2e6cce25d55121245ae8d5101812563d1acac2514a24801a7075b205d23daae83e97f65e1dc2b2acf6bea
-
SSDEEP
192:WcY1yT6pmorFpmY7IuUXFF/dGECdhKauOA/H3iBzgJszDjN3+bauYg:jOoorFv0VF0ruOcSBzgKzPEGU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 270cbddfe76cbbd45a7db2f053d82b97_JaffaCakes118
Files
-
270cbddfe76cbbd45a7db2f053d82b97_JaffaCakes118.exe windows:4 windows x86 arch:x86
ac3301c18a13e07b1ccc97a789ef6331
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
user32
FindWindowA
Sections
.text Size: 1024B - Virtual size: 846B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 150B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ