Static task
static1
Behavioral task
behavioral1
Sample
27acad3ebf44b7ef58a86d582aee6f65_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
27acad3ebf44b7ef58a86d582aee6f65_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
27acad3ebf44b7ef58a86d582aee6f65_JaffaCakes118
-
Size
268KB
-
MD5
27acad3ebf44b7ef58a86d582aee6f65
-
SHA1
e17c8c8d6ea7dd8a267dd5fc70a615e798aeb87f
-
SHA256
78acfe0658179a3cddd2bef923efb3de308de67c5cc6d5701d3c2b7846e95cd5
-
SHA512
f3a0e14c5fe89a783e8e9cd19bb412daa70cbae629db55c3d98955330facde8f90d0d5865d677f79aab2201ca6d6ed78622e2ed045ea6652268a01ffed1e0d51
-
SSDEEP
6144:7+B6LPD2K8bCbmvFBm9gsjw4t6fRLGwpvIc2CDDwj:i0V8Oypsj4BZvv2eDw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27acad3ebf44b7ef58a86d582aee6f65_JaffaCakes118
Files
-
27acad3ebf44b7ef58a86d582aee6f65_JaffaCakes118.exe windows:4 windows x86 arch:x86
de1d5055eeb77471a45b81523b8e2d7c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileType
user32
SetWindowLongA
winspool.drv
WritePrinter
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 264KB - Virtual size: 263KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE