Static task
static1
Behavioral task
behavioral1
Sample
27a69d3e1acb9d0f6d3157312df516cd_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
27a69d3e1acb9d0f6d3157312df516cd_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
27a69d3e1acb9d0f6d3157312df516cd_JaffaCakes118
-
Size
144KB
-
MD5
27a69d3e1acb9d0f6d3157312df516cd
-
SHA1
b046aebaa6b77f386e4c8796f224d095830ca1cc
-
SHA256
d6c1971b08cac3f81795114140e0620cdb2fd3fee36af120aa97619592f11cc6
-
SHA512
38ada902df039192fef165d581b7d9558242441b089ef29385558c6e6db3ddb52e97aba4c1b1e0b28a5b5672c776aa279bf8ab9d0e5e7dc39c299ec3ab912ec9
-
SSDEEP
3072:uyOKuNDMgeUFiVQgHJMCrst6PzYM8HTD+oO3B2GBwR:XOKuaUFf3o3Pz3r34
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27a69d3e1acb9d0f6d3157312df516cd_JaffaCakes118
Files
-
27a69d3e1acb9d0f6d3157312df516cd_JaffaCakes118.exe windows:5 windows x86 arch:x86
a889c966111f632402b48c1256255e3a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsCharLowerW
shlwapi
StrCmpLogicalW
kernel32
LocalAlloc
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rt_ecx Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rt_esp Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rt_eax Size: 512B - Virtual size: 190B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rt_edx Size: 512B - Virtual size: 54B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rt_ebp Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rt_ebx Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rt_edi Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rt_esi Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ