Static task
static1
Behavioral task
behavioral1
Sample
827b7b4deae6713830867b9441586217_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
827b7b4deae6713830867b9441586217_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
827b7b4deae6713830867b9441586217_JaffaCakes118
-
Size
23KB
-
MD5
827b7b4deae6713830867b9441586217
-
SHA1
5cc9e9a2725aa5997ac9bd1242ccddfbb63832bb
-
SHA256
b2c572c13314b946c01412664d1dcdca62c8235e7109f698852d33446ff95a58
-
SHA512
1f71cd17f3ccf452cdf7c073719995e516cda34ceaa984928e09c542158f01f26dfb592d05e30078820d4723166735c58d597caa3ee3bc7b283926a831f3e53d
-
SSDEEP
384:dMQCWAL79rMmicqTxFRau/qCbElp7UmkKHvWaJHOccv2ifGqczexbs8Eewl3:yQbQOJ9FRjTElp7PWSM2Tzex1Eb3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 827b7b4deae6713830867b9441586217_JaffaCakes118
Files
-
827b7b4deae6713830867b9441586217_JaffaCakes118.exe windows:4 windows x86 arch:x86
7914544362d09cf9b2aa6025715d897b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
DragAcceptFiles
StrRChrIA
CheckEscapesW
kernel32
CancelWaitableTimer
DefineDosDeviceW
VirtualProtect
Sections
.text Size: 13KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ