Static task
static1
Behavioral task
behavioral1
Sample
27945ccc27bbcb6fd36ce9e7123717eb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
27945ccc27bbcb6fd36ce9e7123717eb_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
27945ccc27bbcb6fd36ce9e7123717eb_JaffaCakes118
-
Size
4.1MB
-
MD5
27945ccc27bbcb6fd36ce9e7123717eb
-
SHA1
94adf673e06189a3f41dbfa0d77727451c73bfae
-
SHA256
a60ec3f399525aa0af575e05b17debcb0e9f083421ae6ddd7bf44f45e0c4df69
-
SHA512
cbc3097573af46b2609e479e970c63d1dd4d6058e1960138b6115802d965b73ddb5731af2c216477fb9261b5c236c21e2c70a7a561d4f7c8af122f282ac063bc
-
SSDEEP
98304:3bJjLBVq/Lg4GONxozhLRuVhBHcMqHP7gjssD5boKB:LJjLm/ZGtFLRuVh5U76lDVoKB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27945ccc27bbcb6fd36ce9e7123717eb_JaffaCakes118
Files
-
27945ccc27bbcb6fd36ce9e7123717eb_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ