Static task
static1
Behavioral task
behavioral1
Sample
27b17a062f258fcd5e422e98c2791920_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
27b17a062f258fcd5e422e98c2791920_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
27b17a062f258fcd5e422e98c2791920_JaffaCakes118
-
Size
57KB
-
MD5
27b17a062f258fcd5e422e98c2791920
-
SHA1
f5537588ac160856e4ec6e17a9530c93fdcd7c01
-
SHA256
7cfbbb7db8702779f46a4068776d00a40ca45dbbf30e816a9e02f331d75eb6c9
-
SHA512
62cc3b9e7c5efc8ad56fa95590a9d5c17db481e49a29215c5427973a1c5cd6f32c376a65e2f07b3f36907fd4373c0d36870221bf6ed1aae403a8a3a017344e61
-
SSDEEP
1536:NmXKngPbQ4l5MnLH1pepUS0YVoEIy5nmU3z2rmrV:NEKgPs4laBEUYVoALDrJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27b17a062f258fcd5e422e98c2791920_JaffaCakes118
Files
-
27b17a062f258fcd5e422e98c2791920_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE