Static task
static1
Behavioral task
behavioral1
Sample
27ebff6077011cd7f5f6cdc9b50e2b4a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
27ebff6077011cd7f5f6cdc9b50e2b4a_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
27ebff6077011cd7f5f6cdc9b50e2b4a_JaffaCakes118
-
Size
169KB
-
MD5
27ebff6077011cd7f5f6cdc9b50e2b4a
-
SHA1
07571d5bb0a0b9614b276b683bf3f22acf701575
-
SHA256
89d9d74384d860c6c7ca401ac83d6b87483b9970b2f447a625b9eaea8e0e2a54
-
SHA512
d9fc6c28587daf1f2306de595ba10aaebc9de839eb9177f89e451927873f17ce82aff6a7106fd8e3d813dc02925345bfbd41d8e8f5f8ff4681148aed5aca3c68
-
SSDEEP
3072:2oU0GSuDgMPIhHBt3kWrLqyXSpORLGZz5v7YxBtr2anJoN:PGSuDg6IHBt33L7XdLyJ7Y92ys
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27ebff6077011cd7f5f6cdc9b50e2b4a_JaffaCakes118
Files
-
27ebff6077011cd7f5f6cdc9b50e2b4a_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ