Static task
static1
Behavioral task
behavioral1
Sample
5b27a89f962e384cd7bb798926695a2a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5b27a89f962e384cd7bb798926695a2a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b27a89f962e384cd7bb798926695a2a_JaffaCakes118
-
Size
162KB
-
MD5
5b27a89f962e384cd7bb798926695a2a
-
SHA1
0c4cc56dce28ab4514987c895bb1c884a07ab057
-
SHA256
f3513be9dbcf5541e427f849e6aedb0e6f9fb565f46189829396efd9a2196d69
-
SHA512
4d491302ac7a2d07885fdb0902202e5d46ba2b44745c36a92a4cf1074fc28de179899f36d40f33d0b96372f5e606cc73170cd5b93ada6b79724148018d070f88
-
SSDEEP
3072:fND/Plo5V903cbe3H/dpZ5yooZa3+vCACI4H+r0Ev38VBKlfts:ftP+5V3e3frvy6Hc8rcfa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 5b27a89f962e384cd7bb798926695a2a_JaffaCakes118
Files
-
5b27a89f962e384cd7bb798926695a2a_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ