Static task
static1
Behavioral task
behavioral1
Sample
27b6e78bb4d8f813bdd0c310013f83bc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
27b6e78bb4d8f813bdd0c310013f83bc_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
27b6e78bb4d8f813bdd0c310013f83bc_JaffaCakes118
-
Size
21KB
-
MD5
27b6e78bb4d8f813bdd0c310013f83bc
-
SHA1
c0fe8f3c68ad9db206c6a14b9e0334436ca3cb67
-
SHA256
1ac0aeb04701a8a5541a0a72e8e42a789bf02133ef8791aa26901c67b92d2815
-
SHA512
dbd847e64ed75b47107bc61b0aa044a500133703c3737cfc321cef01ddb6d4a55cc2b5afd127fc8a9965a43246f8eaa9b39a3a7b029bb09a91685deaaa32aeb8
-
SSDEEP
384:n+kbfQodXZqain0P1sr9cYQLRYwq73N+adF749GKtL+2gJoNaaERfD6T74:dfQ8ZqjbxcYyRQ3+gKtL+2+zrFD6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27b6e78bb4d8f813bdd0c310013f83bc_JaffaCakes118
Files
-
27b6e78bb4d8f813bdd0c310013f83bc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
k[I�� L� Size: - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��h{Vf� Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE