Static task
static1
Behavioral task
behavioral1
Sample
27d41afddb00b5765f805cc870f6f1db_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
27d41afddb00b5765f805cc870f6f1db_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
27d41afddb00b5765f805cc870f6f1db_JaffaCakes118
-
Size
141KB
-
MD5
27d41afddb00b5765f805cc870f6f1db
-
SHA1
13aa8ce0224ec9a604179da6f163af2ccdee7462
-
SHA256
c03ff9c7b471abdcd07ab1c013db8be67123c22498cd498409ad82b1e4df5806
-
SHA512
d0c5c55e19d7090f328eea63462acf883ececa473ece2dbaecf7dc38427cfe1ff0f7985a7e33de8dbcce9794123ff8d556618653c645c4001e642e605876f8d7
-
SSDEEP
3072:QzmKxcLaK6z+AI7NK9wtaRBXoYsPhUqhrw7x25wBphEMe:6xcWThI7o1oRqT125
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27d41afddb00b5765f805cc870f6f1db_JaffaCakes118
Files
-
27d41afddb00b5765f805cc870f6f1db_JaffaCakes118.exe windows:1 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE