Static task
static1
Behavioral task
behavioral1
Sample
ce7eb4d1cddfc02892e73f4258214824_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce7eb4d1cddfc02892e73f4258214824_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce7eb4d1cddfc02892e73f4258214824_JaffaCakes118
-
Size
864KB
-
MD5
ce7eb4d1cddfc02892e73f4258214824
-
SHA1
bd050bfeae992fd45b10ff01fe01650a2ce70a89
-
SHA256
0dc05010c7f28640ceb0609754af8a9f4fdaf304e0243e963a28c5207001036a
-
SHA512
1d094d540d2d71e67ce24e28050dfd2b00098c9d8c09b93b2ff3b46ac4c24a027a91efce1c5c034e82d1a8d7bb37ed2a14db0c09a3c3323e4aca1c3369f7f67b
-
SSDEEP
24576:p8ZOMON0HLJPqw6XLvZqcsRLpeNOyziKyxEmTZWQ1zPT0cuuxH:RMEWoJXL4csRE0+mT8ej
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce7eb4d1cddfc02892e73f4258214824_JaffaCakes118
Files
-
ce7eb4d1cddfc02892e73f4258214824_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
packerBY Size: - Virtual size: 15.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 862KB - Virtual size: 862KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE