Static task
static1
Behavioral task
behavioral1
Sample
27bba3e68a436f05ced7acb0e3170034_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
27bba3e68a436f05ced7acb0e3170034_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
27bba3e68a436f05ced7acb0e3170034_JaffaCakes118
-
Size
31KB
-
MD5
27bba3e68a436f05ced7acb0e3170034
-
SHA1
53f8c87241cf8e0c99524517b20d813dcb21b1ba
-
SHA256
2683dcb17674dce01faced246f47a73c81255a194a36dfd62b37a52b3e87f277
-
SHA512
5f4d824ec09a85cc3ea7ba9e53a3f6b4a9e2849855cfcaedb91613cb25a0cbc9e1c6c53cecac19f1c2f37c912ea80b58e0d7f2dafea6ac13673a89a02b34204c
-
SSDEEP
384:otjQsqJ+XqxuJ/S2Xt1HZNq29gHcYcZHkunvCLK79h5v99XNcsNdBGCQvCOC:WTaNoJ/15ND9gHa5hD9vjjdBNOC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27bba3e68a436f05ced7acb0e3170034_JaffaCakes118
Files
-
27bba3e68a436f05ced7acb0e3170034_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 26KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE