Static task
static1
Behavioral task
behavioral1
Sample
27e31cc357e4f18717fbe10427223b82_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
27e31cc357e4f18717fbe10427223b82_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
27e31cc357e4f18717fbe10427223b82_JaffaCakes118
-
Size
240KB
-
MD5
27e31cc357e4f18717fbe10427223b82
-
SHA1
8810deb721eb02c867290741d75171a0d6d5c8f7
-
SHA256
cc9d145b8572ce695d31951e1bce2c53f973fe724203b031a62da20c37182a1f
-
SHA512
04f9cda6d785e613e07d650024882eae0f1e4f6ff1aa28958d760eb88bd2c746953ba3b9d51d85962a6cd3903910c885cc4c8bd6f4bcdbd8355b4b85e0940f83
-
SSDEEP
6144:9SeXe18q8R/WWwWSaEV4zIJjZ5LbvGKaEV4zIJjZ5Lb3:EeXe1zCpSaEeMJjZraEeMJjZJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27e31cc357e4f18717fbe10427223b82_JaffaCakes118
Files
-
27e31cc357e4f18717fbe10427223b82_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512KB - Virtual size: 511KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ