Static task
static1
Behavioral task
behavioral1
Sample
ce75e50a5402d3298212b5f9a05e222a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ce75e50a5402d3298212b5f9a05e222a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce75e50a5402d3298212b5f9a05e222a_JaffaCakes118
-
Size
51KB
-
MD5
ce75e50a5402d3298212b5f9a05e222a
-
SHA1
9e90c28c0bba68d570416d00693da6b122e730ef
-
SHA256
14e80b5f1e52978c5905eaa5fb2433ad4ce55fe25cbe1c2665e0bb2c196afebc
-
SHA512
0d055b2c169f401776682eef4855685788e41458ab51d93bc3643b3f8e7f1a1a2f24e1fa3253fa2356879201820e582bcab6e44ac8a879cbd8510c9a1a4f7c3a
-
SSDEEP
1536:w5Hzv+A4Rw4uoUrB53/KCYHL3RiAfLi7aKYY/8Qw1Qry9aJ2:24yH3/VGfLi5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce75e50a5402d3298212b5f9a05e222a_JaffaCakes118
Files
-
ce75e50a5402d3298212b5f9a05e222a_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sections
.text Size: - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ