Static task
static1
Behavioral task
behavioral1
Sample
27900c13141bd9bd4668577ad9665a25_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
27900c13141bd9bd4668577ad9665a25_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
27900c13141bd9bd4668577ad9665a25_JaffaCakes118
-
Size
378KB
-
MD5
27900c13141bd9bd4668577ad9665a25
-
SHA1
ebc293c0370379a85ef1e18cdf205b5be1bec380
-
SHA256
f41ac29abfc11bdfa7194a9f22157d362b919816b7036771c647ee71612d58c6
-
SHA512
63d4cc3489804a10f1a5b82f2de6488d3b75da490ed5f12a69fb1f3a814a01ba371753d3d0c24b11722ee6a0550787c2815dcd1d664d41e7a9ba4301b33a016a
-
SSDEEP
6144:SgqphrgSbdqx+69K5XiRUD7Eofd5Jsa+4gYHokZmuLFn+df/pwxhqMqyAdmiDKq3:FSbdoYBuO7Eofd5Ws3c8Fncf0hqHmWKK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27900c13141bd9bd4668577ad9665a25_JaffaCakes118
Files
-
27900c13141bd9bd4668577ad9665a25_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Pk>0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Pk>1 Size: 377KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Pk>2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE