Static task
static1
Behavioral task
behavioral1
Sample
ce6cc091e188bac5e2af51ea193eacd6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce6cc091e188bac5e2af51ea193eacd6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce6cc091e188bac5e2af51ea193eacd6_JaffaCakes118
-
Size
970KB
-
MD5
ce6cc091e188bac5e2af51ea193eacd6
-
SHA1
2ca7ee89a5501a9ed2da06ba0eb85e5b19ed5fa5
-
SHA256
4d91ea0ce1cf141119d0987629b8e0a635b518b3dec95bb0233e8f42ecab17f2
-
SHA512
f79c08d80b119a1bad836f1f4d591eb74d37b538ccbb23bd6c5619c58b9f84d34d2e18ac1b9d166d42055aee1000d0d5a1b7782a27e208b24017117f38c3607c
-
SSDEEP
24576:7iCbC1ilNEHhO+5J73F2zUhVI9dZQmXi7638A+YtOA:7ijDHhvJ73F2whJmy76LtOA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce6cc091e188bac5e2af51ea193eacd6_JaffaCakes118
Files
-
ce6cc091e188bac5e2af51ea193eacd6_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 603KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 345KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE