Static task
static1
Behavioral task
behavioral1
Sample
27e476ce8c55e16cba531056acee62d6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
27e476ce8c55e16cba531056acee62d6_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
27e476ce8c55e16cba531056acee62d6_JaffaCakes118
-
Size
116KB
-
MD5
27e476ce8c55e16cba531056acee62d6
-
SHA1
b67449d052a8118f78b85da541a64c654dd876ae
-
SHA256
64ea61581dab00f60657ff892f5bd9c8da2227bfb02185934422099d2eda6827
-
SHA512
1b4efcd8d4775659eed892bb785f9ddb02ed82cf45daf436597dca7bc867569b0a639fad5f95f825b3757b2c04be73a6227cd9ee197ae42d4ea6f6e58b1ccb61
-
SSDEEP
1536:M44ZglWxrP4152J4s7I+XmpfjDcdXSVFFqLp5RRV6f5J+oi+aC+z48JcbqEK0:QY4ee4shSsAFFqdrR05rrjrbq7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27e476ce8c55e16cba531056acee62d6_JaffaCakes118
Files
-
27e476ce8c55e16cba531056acee62d6_JaffaCakes118.exe windows:4 windows x86 arch:x86
7920b728c2c8bb6a7be5298a4bbc74e0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
MulDiv
VirtualFree
Sleep
ExitProcess
Sections
.text Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 163B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ergerg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ergerg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ergerg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ