Static task
static1
Behavioral task
behavioral1
Sample
c27d6eb47da0f6e9ba56dbb4b0176e9f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c27d6eb47da0f6e9ba56dbb4b0176e9f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c27d6eb47da0f6e9ba56dbb4b0176e9f_JaffaCakes118
-
Size
23KB
-
MD5
c27d6eb47da0f6e9ba56dbb4b0176e9f
-
SHA1
64516bca1e91513ecfc0f3ac4e4a006edcb5accb
-
SHA256
c1c2caf3b0001ffdf755ea145091704868cb6bb3dc5b900a72d41c7bc921afee
-
SHA512
061752c804f2bc40fcdbb9f24c0ff3f875baeea15bff781653113a7517362f9db3f18e5e41b7455c81d1275aec1d51a4f0a76fb47f44139176f1e8c41ff691c8
-
SSDEEP
384:k0yPGifvWHjEAoy9jxS9JXA0IkIMDzNIkIMDzNIkIMDzlWHNxTxIsQryQ:XgBvWHloWA960IkRDzNIkRDzNIkRDzKB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c27d6eb47da0f6e9ba56dbb4b0176e9f_JaffaCakes118
Files
-
c27d6eb47da0f6e9ba56dbb4b0176e9f_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE