Static task
static1
Behavioral task
behavioral1
Sample
ce0cef9421e6fb05cdc8a8dd4b909ff3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce0cef9421e6fb05cdc8a8dd4b909ff3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce0cef9421e6fb05cdc8a8dd4b909ff3_JaffaCakes118
-
Size
340KB
-
MD5
ce0cef9421e6fb05cdc8a8dd4b909ff3
-
SHA1
e7f92a7edaa4f2adb673748970e84dd5aeff4c12
-
SHA256
88e1dcfc5929c7c51e0815a5dc782533f5cd329958a6035f278b507564643b04
-
SHA512
3821499dfe9f53dad9cc82c1a5be07b7fc2ef39911d7d30a4090d2c1410d853a436620a62132b0408d3db76d736dd9df1fed8564beb8f5913f5d93ecb70ba0ff
-
SSDEEP
3072:6vfDqzob19o1OFNgVpBTJK5eJrrMO2qjO/4yUdijPGBJl:cLQyo8FNgVHTJjrrMO2m44xiz4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce0cef9421e6fb05cdc8a8dd4b909ff3_JaffaCakes118
Files
-
ce0cef9421e6fb05cdc8a8dd4b909ff3_JaffaCakes118.exe .vbs windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE