Static task
static1
Behavioral task
behavioral1
Sample
ce28573a659657e69c656b5254995288_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce28573a659657e69c656b5254995288_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce28573a659657e69c656b5254995288_JaffaCakes118
-
Size
4.5MB
-
MD5
ce28573a659657e69c656b5254995288
-
SHA1
dbe14712e8d29caa430dc80e6f30a1b73471c967
-
SHA256
603e2a816517102c4f20196699bc330f056d3a18f765a0cbe988c1ef891ef62d
-
SHA512
9fb278dd211fd8ec0c4bfa07b9fe77f8d8cdc15c058e0827822176757a2c2a98c4137232a998ef4edeb322d65207b8d61c332f0dc83634fcddaaae04abdb3a0e
-
SSDEEP
98304:kCASqBOgVgDMxGFgVaBiil2K0QGxasLWD+rmQSnaYqmBGVAEa:kbSqBngDMcOVap0xasqD16mBGu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce28573a659657e69c656b5254995288_JaffaCakes118
Files
-
ce28573a659657e69c656b5254995288_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 375KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.7MB - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 484KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE