Behavioral task
behavioral1
Sample
4639cf7b07ded0aebc5588ee9c424b1b221a3d02e00c716527d5f49cc029dea4_JaffaCakes118.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
4639cf7b07ded0aebc5588ee9c424b1b221a3d02e00c716527d5f49cc029dea4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral3
Sample
4639cf7b07ded0aebc5588ee9c424b1b221a3d02e00c716527d5f49cc029dea4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral4
Sample
4639cf7b07ded0aebc5588ee9c424b1b221a3d02e00c716527d5f49cc029dea4_JaffaCakes118.exe
Resource
win11-20240709-en
General
-
Target
4639cf7b07ded0aebc5588ee9c424b1b221a3d02e00c716527d5f49cc029dea4_JaffaCakes118
-
Size
449KB
-
MD5
fcbac04cfd6769ffbe3e7014563a8858
-
SHA1
0a2ecf9f8935807dfc1536fcb4b7266bba534646
-
SHA256
9469b1e29d881655630898304b005fd47c80d6d208a2cc9424b98139ecc767e1
-
SHA512
f32e028b6522110d04bb40868718d34afc478c9fd2cb281cf55553336af51dbe3aa857922fd7074e136450cde8e7d07b1501a2bde458d6ea391b2eb4086345f4
-
SSDEEP
6144:/14IfUD9hDy2MrQzspxDgOUPYo6O/HpxDgOUXe8OFNNFOaQMxgh39f6eG7fpv:NpfujDy2MkzsP/OPPSe8O9FDfKtS1Vv
Malware Config
Signatures
-
Berbew family
-
Malware Dropper & Backdoor - Berbew 1 IoCs
Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.
resource yara_rule sample family_berbew -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4639cf7b07ded0aebc5588ee9c424b1b221a3d02e00c716527d5f49cc029dea4_JaffaCakes118
Files
-
4639cf7b07ded0aebc5588ee9c424b1b221a3d02e00c716527d5f49cc029dea4_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
�.rsrc Size: 128KB - Virtual size: 1024KB
`.idata Size: 128KB - Virtual size: 1024KB
@.idata Size: 256KB - Virtual size: 1024KB
@.reloc Size: 1.5MB - Virtual size: 2.0MB
`.idata Size: 128KB - Virtual size: 1024KB
@.reloc Size: 2.1MB - Virtual size: 3.0MB
@.idata Size: 128KB - Virtual size: 1024KB
@.idata Size: 128KB - Virtual size: 1024KB
@.idata Size: 256KB - Virtual size: 1024KB
@.text Size: 768KB - Virtual size: 1024KB
�.text Size: 1.4MB - Virtual size: 2.0MB
�.idata Size: 128KB - Virtual size: 1024KB