Static task
static1
Behavioral task
behavioral1
Sample
a27e3e740c410e1010a349c03a9b04b5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a27e3e740c410e1010a349c03a9b04b5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a27e3e740c410e1010a349c03a9b04b5_JaffaCakes118
-
Size
8KB
-
MD5
a27e3e740c410e1010a349c03a9b04b5
-
SHA1
29d3dc0d4ee12d36e017383d1f746e73e9619f51
-
SHA256
4b029c6891f2bbad15ca851db60c07a0ac8b5a168511b10e26feb64c6ccfe740
-
SHA512
ffc9afb07fcba567cf495b4ef023a55c6ad3d5138b44ce73882e8db22678b898d3ecd97edcc100c5a6c665e98030986db6e6b6bca45cbf49bd6ce4a7f92b35ee
-
SSDEEP
96:Z16Pd+k9cQudAyd9Xf37tj+nnEVr/gJRpLgSvET+eUj0rmzkHJZZZBcli9acYQ2w:AdlLK9XztSgboSVUYiwpTZBLYHb3pKYu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a27e3e740c410e1010a349c03a9b04b5_JaffaCakes118
Files
-
a27e3e740c410e1010a349c03a9b04b5_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.spack Size: 1023B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE