Static task
static1
Behavioral task
behavioral1
Sample
27c7fe3f485dad20a85a90c6b5fc6148_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
27c7fe3f485dad20a85a90c6b5fc6148_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
27c7fe3f485dad20a85a90c6b5fc6148_JaffaCakes118
-
Size
357KB
-
MD5
27c7fe3f485dad20a85a90c6b5fc6148
-
SHA1
daf35de9dba9524de956972bb43f23219faff036
-
SHA256
cf05393d69594344f0697d262db2c2ee81e61b1cbfc0ea448ba9a8c6d5a76d79
-
SHA512
3e0757c55bec8c78755554863fda9e3572aa641b0845f433e0ea5c6773c81322c4079814fb0f036d5f6d32b3ff6454dafb91187463702b649262c3f08bc98295
-
SSDEEP
6144:rGyBjVM6/rweDVB19lUJRVeBK4OHs5OuNAua0vVOG2wt8NNPfzqlC:hjVNzeRVeBK4O8baRwt+DoC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27c7fe3f485dad20a85a90c6b5fc6148_JaffaCakes118
Files
-
27c7fe3f485dad20a85a90c6b5fc6148_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
PopSky Size: - Virtual size: 756KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Azrael Size: 349KB - Virtual size: 349KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE