Static task
static1
Behavioral task
behavioral1
Sample
27ae0185f6e296bca71c5956f0a46d53_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
27ae0185f6e296bca71c5956f0a46d53_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
27ae0185f6e296bca71c5956f0a46d53_JaffaCakes118
-
Size
444KB
-
MD5
27ae0185f6e296bca71c5956f0a46d53
-
SHA1
be7fe823d350aae389ce8bb24bf449ec98b190a2
-
SHA256
54d7f8cfe94ed1e12a925b35906bebfbf2c5cfb610bf73c9a992891e1b5b8208
-
SHA512
d4a30c9636482345339ea03f7a4c111b87124fda98c0602a66e502c68cd04a8820c52c15989aaeb37f5fee2e58b5f4782a47191cec6ecd5879454426746a2cea
-
SSDEEP
6144:0G7T+Qwc1z8lFqLBNA761JcT9hsyM7xXYtyBz8:0G3+Qnl8lcBRAjsySXyMz8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27ae0185f6e296bca71c5956f0a46d53_JaffaCakes118
Files
-
27ae0185f6e296bca71c5956f0a46d53_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE