Static task
static1
Behavioral task
behavioral1
Sample
27684974896b1b41415f6a9e518b98e0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
27684974896b1b41415f6a9e518b98e0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
27684974896b1b41415f6a9e518b98e0_JaffaCakes118
-
Size
232KB
-
MD5
27684974896b1b41415f6a9e518b98e0
-
SHA1
18ea8848884bdaaba35eb3a61ffe1d7dbbbeb314
-
SHA256
2fabdc6ceb845d15aa3b3f0d1e55b8b14ab4d70b092b1b3abc7d7293b2a4543f
-
SHA512
9fa4aa5b5abcd4949c2b27e89f0b6e2a80f0c7a859f15530d79a6425f761f707979bbdbcdc1ff9d902c8ec4352eca5bf431b59e660842a0740a5f336029f794e
-
SSDEEP
3072:6FNd1mT2RIZxoswh92q7V7FfnOvpVH1LTUlXwmsryCU18cOkLABGx2ho:YNLmyIsyUVAvpVROAmsu4c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27684974896b1b41415f6a9e518b98e0_JaffaCakes118
Files
-
27684974896b1b41415f6a9e518b98e0_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
drws0 Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
drws1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE