Static task
static1
Behavioral task
behavioral1
Sample
27fd2168093d5a3ad1a2da7a3975acdc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
27fd2168093d5a3ad1a2da7a3975acdc_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
27fd2168093d5a3ad1a2da7a3975acdc_JaffaCakes118
-
Size
332KB
-
MD5
27fd2168093d5a3ad1a2da7a3975acdc
-
SHA1
e7ef0a4712e79044c0b4dcf7964b224ae6391ba8
-
SHA256
e002da696e937d694c3aac4cdfe865ab984c09dd29c8c69c51a4f6f3865d6583
-
SHA512
fa17654f5df45dc98704538b4f9bdf6308e09dffaa400c94c1ba9df7298ef6a2039a2fd291ea1ac6837fdbdba08b8abaffe1df0c4eaac7eb5fcc783759d2c544
-
SSDEEP
3072:yxvxTdllPCWb6SuL5Hg8Jti8vWqitwLBaixQ+aJe1mgawzxsBub861jIHxow21D5:wpTdUHntxvTV5nBgewNiSJiMAx0WdB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27fd2168093d5a3ad1a2da7a3975acdc_JaffaCakes118
Files
-
27fd2168093d5a3ad1a2da7a3975acdc_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 80KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ