Static task
static1
Behavioral task
behavioral1
Sample
27e36780a26476d603d20051e8eac961_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
27e36780a26476d603d20051e8eac961_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
27e36780a26476d603d20051e8eac961_JaffaCakes118
-
Size
368KB
-
MD5
27e36780a26476d603d20051e8eac961
-
SHA1
be3f77041dcd6f918b709e416e9f97b6f7c52eda
-
SHA256
062233147b4479a7e717eff4ef6295744a25c7f218f4450bd3eeb05973255ec8
-
SHA512
2ecad60be7eb71f0376e5fe88b821122c3fb5397f63b2990d58a6e190976293d017c856b8773dba7a9567561800f48973e536998929f8588b55f1f286e08917a
-
SSDEEP
6144:dL4wwC9BxRyOJQIckYgEJ2cfYFDQY/zYZ77qgBw51O6ytWBoHr79uiwTRcM:d4wFlVJqkYZXfYlf/dotZrxu3Tr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27e36780a26476d603d20051e8eac961_JaffaCakes118
Files
-
27e36780a26476d603d20051e8eac961_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.ylizffs Size: - Virtual size: 496KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hpnztek Size: 300KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.behyzmr Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gwsrvzj Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hextyoz Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vaqsgkn Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jhvgily Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.agjavvm Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE