Static task
static1
Behavioral task
behavioral1
Sample
27bca85d974dd971395cf0ce8b09d60e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
27bca85d974dd971395cf0ce8b09d60e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
27bca85d974dd971395cf0ce8b09d60e_JaffaCakes118
-
Size
79KB
-
MD5
27bca85d974dd971395cf0ce8b09d60e
-
SHA1
6a0bdb6295e7438c1a734296524825de5114032a
-
SHA256
6e3890db2b9fc4304a46d9ac4879e1970f6f5eb6144b9409155afb1c825f88c8
-
SHA512
00c9bfc8cea26758d10298860a4445c63e0c35e5bc77672f775e7c58cc2d2e23c123fc9906fec1180cd234c4f133b4a6977efa3fcea75f49ed7f79a37c92e784
-
SSDEEP
1536:N44WoJilYFjeRP7cEse2ScUfTDCIFRiPskdybYI4WzDxTjD6FYKe:y6JiloEshSlTDtknI4WxjDB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27bca85d974dd971395cf0ce8b09d60e_JaffaCakes118
Files
-
27bca85d974dd971395cf0ce8b09d60e_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
..#.. Size: 78KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
...... Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE