Static task
static1
Behavioral task
behavioral1
Sample
27d47c44c0280afe71208638eb20c763_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
27d47c44c0280afe71208638eb20c763_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
27d47c44c0280afe71208638eb20c763_JaffaCakes118
-
Size
7.9MB
-
MD5
27d47c44c0280afe71208638eb20c763
-
SHA1
d5001e6f84c971d26dd129ccc832a963afc8b153
-
SHA256
f570068637105a06e1dbfbdc9c65fdfdbfaceab95c2af809c5b8f461b21651d8
-
SHA512
c3693b496c0fdbdf6a7ea6f630b381595452df843da15d940c851a5c2d8269b8c832cecb90830bb286d9ab806baac4bb92f15027eab193fe9ba820bf2ce38636
-
SSDEEP
196608:AYx0F5wXklt3jyVuCbo6cI0Csq4dkVKD:AYGycI0CTe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27d47c44c0280afe71208638eb20c763_JaffaCakes118
Files
-
27d47c44c0280afe71208638eb20c763_JaffaCakes118.exe windows:4 windows x86 arch:x86
500ff1538958cc73738bf0c262a1773f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
user32
MessageBoxA
Sections
.text Size: 1.6MB - Virtual size: 8.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 855KB - Virtual size: 13.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 68KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5.3MB - Virtual size: 34.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE