Static task
static1
Behavioral task
behavioral1
Sample
27b897b1d70f3520832b302669b69052_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
27b897b1d70f3520832b302669b69052_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
27b897b1d70f3520832b302669b69052_JaffaCakes118
-
Size
184KB
-
MD5
27b897b1d70f3520832b302669b69052
-
SHA1
5af3fce1e674d6a95ba3da5cf8e778ead2e2cd22
-
SHA256
93d091bacc9f1317c9832bb48c61fa635367061f76d7ac629a46c8a5486bf27f
-
SHA512
d75828a97ec9b92fce9a9d5b834cd936fee9f317cc1580ff075d925bb8e6d56253260b3b8f7e21a60d7f09df02752a593fe37176f33f2b0ec685717c4f435bf0
-
SSDEEP
3072:BPKJrpTEf8aKhWB12G8eoU3E2iqVVQtrutaPQpe92:NKdpEf52W4qXQ0sT2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27b897b1d70f3520832b302669b69052_JaffaCakes118
Files
-
27b897b1d70f3520832b302669b69052_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 147KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ