Static task
static1
Behavioral task
behavioral1
Sample
27f5423a223137a429b46a3099dc0628_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
27f5423a223137a429b46a3099dc0628_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
27f5423a223137a429b46a3099dc0628_JaffaCakes118
-
Size
339KB
-
MD5
27f5423a223137a429b46a3099dc0628
-
SHA1
53232261774ee1e3c72b70255cce69e581f63617
-
SHA256
0dc8e19d480450baeef616c6dab2f8c16da8cf3d0ee10038a3439f7a2720e4cd
-
SHA512
558efdde8f47bb13982afa1a65adce064c4b1de9b79ff6f5c4c507370d92239e19a52aea3175030046555591bed266a6b58493de5922717558dc19c029ece983
-
SSDEEP
6144:RYOYrM2WkDMjh8hKRKEE7RXWGfn62JeZe7W6wJji0B:AM2/BhoKEyR6aes66wViS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27f5423a223137a429b46a3099dc0628_JaffaCakes118
Files
-
27f5423a223137a429b46a3099dc0628_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 313KB - Virtual size: 748KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE