Static task
static1
Behavioral task
behavioral1
Sample
277c792dd3fc8dc3e393826fa13947d6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
277c792dd3fc8dc3e393826fa13947d6_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
277c792dd3fc8dc3e393826fa13947d6_JaffaCakes118
-
Size
1.5MB
-
MD5
277c792dd3fc8dc3e393826fa13947d6
-
SHA1
e32bbc8a72600fcbd7c36b983a0eb027ae601532
-
SHA256
7e58bd269d86ae4e04e3b655048c8086555ba87c481f7d5e6b76492f1995d455
-
SHA512
ed0c485e7c72b8fc2e00246ab359f22bf2d0678531ac902f56fc64c7d2fa30f6bad65de6d48708aaec1b7e1fe7586e476b1b8a41315d3bfd3a7853f5d82abb1a
-
SSDEEP
24576:Mudj8Fd82SJnNi5S8Cl2xD/Iik2MT8iEeTmEqy3DFJxJ8CC5yHP:MKYd82OEKEKmyRfVCM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 277c792dd3fc8dc3e393826fa13947d6_JaffaCakes118
Files
-
277c792dd3fc8dc3e393826fa13947d6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
yC Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE