Static task
static1
Behavioral task
behavioral1
Sample
27f42d068cb0b4d0bbef0c086870a32f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
27f42d068cb0b4d0bbef0c086870a32f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
27f42d068cb0b4d0bbef0c086870a32f_JaffaCakes118
-
Size
272KB
-
MD5
27f42d068cb0b4d0bbef0c086870a32f
-
SHA1
2e299821f6f372dc9cd3b62100a6217ccc7b4a0f
-
SHA256
569ad2201100e3446ef9025025b85c7e858b97d9d9085b05f6bff1ae8866c3f6
-
SHA512
63b8303c9ab19d09c5bd53659e2b861bbd7daac2381f01feeb25c91d306645168939f04f21cf744b92281092a1c701d34218d042d6d66f62f50174803e11d8cd
-
SSDEEP
6144:feBn+aC1meyUGimMNIRlGmsPGw+9/XYKIdy:fYW1meyUGpuIPb5wE/zP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27f42d068cb0b4d0bbef0c086870a32f_JaffaCakes118
Files
-
27f42d068cb0b4d0bbef0c086870a32f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 42KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 198KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE