Static task
static1
Behavioral task
behavioral1
Sample
27d53ce18924e6639b6ac96ba22d5dda_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
27d53ce18924e6639b6ac96ba22d5dda_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
27d53ce18924e6639b6ac96ba22d5dda_JaffaCakes118
-
Size
185KB
-
MD5
27d53ce18924e6639b6ac96ba22d5dda
-
SHA1
e1923cb86e8ca141ae20c1aa27daf15b55a00ab4
-
SHA256
cd6723ce774149253aef0abe4f92c5af4510823b5a03d16fcbf05564aa8257aa
-
SHA512
bb0f5a15da5459ea8a0fd289d1a3e67152cee5dcec6c84745f030ce7632daea1845f2d4a30243700aca59fca1e4703911808e4767d6dc0c99025e234f030afb6
-
SSDEEP
3072:VfiYAag71EJak81etqlQK6VJJVKghKJRuzIohwjoUbo8kVu7zSjJXnWDYcTP:Bi7GJ/81zHsHKgJp1h6zUJXWDtP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27d53ce18924e6639b6ac96ba22d5dda_JaffaCakes118
Files
-
27d53ce18924e6639b6ac96ba22d5dda_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
kkrunchy Size: 181KB - Virtual size: 516KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE