Static task
static1
Behavioral task
behavioral1
Sample
27f4206aa7be244d1c478b1b24998d48_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
27f4206aa7be244d1c478b1b24998d48_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
27f4206aa7be244d1c478b1b24998d48_JaffaCakes118
-
Size
52KB
-
MD5
27f4206aa7be244d1c478b1b24998d48
-
SHA1
7f3ca10579fa63c283b8dc6661497686481bff2d
-
SHA256
226f5cd8bc80ef02f26001a6ca51a37114b524e7827f474f2003aee09a8c9b70
-
SHA512
46862425de60b6d6870c31b36160226cb5d68480f8bdd4eda96c350e605075bb29b34b7ec01e04b228aeb1da8f9b2cedfdcfc9e087a7a1302f24b19a1ff4fedf
-
SSDEEP
768:OqObMzwzz083Jzq4fZ4RB+Hgxcmg90JA4s4WqFECMD8T6KMaZqB53yvKy:+DZq4h4RBfWqeCMD8T6KMpB53yvKy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27f4206aa7be244d1c478b1b24998d48_JaffaCakes118
Files
-
27f4206aa7be244d1c478b1b24998d48_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
���� Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE