Static task
static1
Behavioral task
behavioral1
Sample
ce21dce3ceae4fe677d395fdccb6deb2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce21dce3ceae4fe677d395fdccb6deb2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce21dce3ceae4fe677d395fdccb6deb2_JaffaCakes118
-
Size
1.5MB
-
MD5
ce21dce3ceae4fe677d395fdccb6deb2
-
SHA1
079a1c5282fdd0a2d48e99c62ebf3071945df2b2
-
SHA256
aa35c5aed71afd6eaeff05a63296f4f1d2066d3fbadaf954e70fbc4b6896273b
-
SHA512
d961f8624589f317cbb80f0c43e94475b5469dd2e7ab7445ed7260864c924d8e62765b5638b958a2f52c235db05ca06ab5cb9ea0d99fb05d5420bd19d91bb6fe
-
SSDEEP
24576:kkzCKZlazuHB076wA9K3kqamthNFilw8z5NH0Oruc73o97HUsxwQmyvP:tflazuH209samDNSzrruc7497DbmyvP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce21dce3ceae4fe677d395fdccb6deb2_JaffaCakes118
Files
-
ce21dce3ceae4fe677d395fdccb6deb2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 475KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx Size: 863KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE