Static task
static1
Behavioral task
behavioral1
Sample
ce40fbab4fb31035dee3236d0da11be4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce40fbab4fb31035dee3236d0da11be4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce40fbab4fb31035dee3236d0da11be4_JaffaCakes118
-
Size
54KB
-
MD5
ce40fbab4fb31035dee3236d0da11be4
-
SHA1
e8a649a54a442f3c4f280e0c46a8b28318201244
-
SHA256
326453351e987cba7fc1c23410a039717d5f2e248d91c1bd2c3d1138540c2413
-
SHA512
dfe607988b3263254661a40e5ee71f11e9732b65ce0dc38673dcee0996895c3d9eef5ad1d3beedbeb17317b65639c6002d82a480e0ea4674b0e018b08b25acad
-
SSDEEP
768:aAvu+PAPRUhzbOKb4KRc7axfpiI6l80VnJ0rEUXBciDglexvFAmbCM1m3jh:aAGPRMb4KRZoDSknJ0QqB3cQdamtm3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce40fbab4fb31035dee3236d0da11be4_JaffaCakes118
Files
-
ce40fbab4fb31035dee3236d0da11be4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�PX0 Size: 144B - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�PX1 Size: 18KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE