Static task
static1
Behavioral task
behavioral1
Sample
ce0d527df6a70d4ebaaa0f640eb4df7a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce0d527df6a70d4ebaaa0f640eb4df7a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce0d527df6a70d4ebaaa0f640eb4df7a_JaffaCakes118
-
Size
184KB
-
MD5
ce0d527df6a70d4ebaaa0f640eb4df7a
-
SHA1
27daeea17c647578a1307b3c00dfb377b475691e
-
SHA256
c6255fe77323f4fa6d5f77aaeb69269ed2ab6557009210f5b57b576195875e83
-
SHA512
9da20681ef582c8045703164a14ba3fdc671994201909885720268f1b1afdfbf4bdef2a93d0ac182486e9d2eac823db68bfc4cc43ee14f0715033f47774db5e1
-
SSDEEP
3072:tO6LIbtOfmQobeLfhtJkSVrtnxlZbxeegXZbfJH/8zovELZYmEwIoFWSVS:zeU3obebNkS1tFzgXxN8a2+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce0d527df6a70d4ebaaa0f640eb4df7a_JaffaCakes118
Files
-
ce0d527df6a70d4ebaaa0f640eb4df7a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 273B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ