Static task
static1
Behavioral task
behavioral1
Sample
d27214b74c2895bdd049fd1d8330de11_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d27214b74c2895bdd049fd1d8330de11_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d27214b74c2895bdd049fd1d8330de11_JaffaCakes118
-
Size
31KB
-
MD5
d27214b74c2895bdd049fd1d8330de11
-
SHA1
dfb851e2c41922e685218e19d7c504f1df020257
-
SHA256
b2fec30d1f0f6161a4830dcdc5cbf089adf5c8327d9c58118155203768436960
-
SHA512
b0905abb0800ddeb1132f57796463ef7edd3b1eb9f141ded668a4ed38fc0da7f3d8a3821050e31b8b31d50d8cca2d0fedd15995ae49d1c7d6388a99f3bb20811
-
SSDEEP
768:XLhVv01syRRIDKzy/e/n12T7Ohcq8rDI7qtWZkFEIIsT:FVvcsyRRIDIyCgmhcqeDxEJM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d27214b74c2895bdd049fd1d8330de11_JaffaCakes118
Files
-
d27214b74c2895bdd049fd1d8330de11_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
PEP0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEP1 Size: 30KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE