Static task
static1
Behavioral task
behavioral1
Sample
827bc2ac802ba73854d7371c8fc7ec46_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
827bc2ac802ba73854d7371c8fc7ec46_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
827bc2ac802ba73854d7371c8fc7ec46_JaffaCakes118
-
Size
558KB
-
MD5
827bc2ac802ba73854d7371c8fc7ec46
-
SHA1
8315966df64727cc4181eb6a9e923ebae79d60cc
-
SHA256
2cc459a2b6ad447abf5185980a77c1d09d0bddc672c9542567fc39b32651c79c
-
SHA512
ebdb3056f996066081d925c81625fcd580193a24196e6c949ce83f7d5bf166f0c8312e85b0b36a8fa2ca62f0cd3f397ed4e42cf357b29751312bc83b18d8b0cf
-
SSDEEP
12288:7RD7wzDGl7OL0pDUCVkXKrTA0MyGWBhOT633jLB8hSdI9:lDUzDGl7c0uC97jLB8Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 827bc2ac802ba73854d7371c8fc7ec46_JaffaCakes118
Files
-
827bc2ac802ba73854d7371c8fc7ec46_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 558KB - Virtual size: 588KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE