Static task
static1
Behavioral task
behavioral1
Sample
27ce4d76fce3e4217e3d2d21a91231cf_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
27ce4d76fce3e4217e3d2d21a91231cf_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
27ce4d76fce3e4217e3d2d21a91231cf_JaffaCakes118
-
Size
80KB
-
MD5
27ce4d76fce3e4217e3d2d21a91231cf
-
SHA1
4ae789eca7aec9d4f371ff6bc825a3bb7a238f7d
-
SHA256
1ea75d45e2cf09d343a0bdc28e243487146e3f38d4aed163413dfd1bc7f6f4df
-
SHA512
bad1f0701f0c8dfd88ba97118872c1261bd051218292145ce96668154bbade8ce7e2669b7ce28502f1d9cf39f69165e31aa99c0e20f6bbf4cf0b14421a3631b0
-
SSDEEP
1536:YXBli2nHmWeIyXZK2mZWyCatb7Pypv2s:UeuGWeXXZbmsZUbDyN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27ce4d76fce3e4217e3d2d21a91231cf_JaffaCakes118
Files
-
27ce4d76fce3e4217e3d2d21a91231cf_JaffaCakes118.exe windows:4 windows x86 arch:x86
91a4f6b48dc444fceb28b0f6d5dd7b8a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
ReadFile
GetCPInfo
GetConsoleMode
GetLastError
FindAtomA
WriteFile
DeleteFileA
OpenFileMappingA
GetFileTime
Sleep
SetLastError
FindFirstFileA
GetStdHandle
ExitThread
CreateThread
GetComputerNameA
DeleteAtom
OpenFile
GetCommandLineA
GetFileSize
CreateProcessA
DeleteFileW
ReadConsoleA
user32
DrawIcon
IsWindow
LoadCursorA
GetDC
GetDlgItem
CopyImage
IsMenu
LoadMenuA
DialogBoxParamA
CopyIcon
InsertMenuA
DrawTextA
GetFocus
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: - Virtual size: 2B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 170B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ