Static task
static1
Behavioral task
behavioral1
Sample
ce854c09dfb5aa8bb553c4170705cc98_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce854c09dfb5aa8bb553c4170705cc98_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce854c09dfb5aa8bb553c4170705cc98_JaffaCakes118
-
Size
382KB
-
MD5
ce854c09dfb5aa8bb553c4170705cc98
-
SHA1
a251445a2ae53340dddb65af3b667f749f6bbe4f
-
SHA256
c3aca97bd4668ba9763bc7ad0c501e227532722536dfda1d55708f7818327906
-
SHA512
416d2acfa06dd5c39d6df91ac10c23f711639c4d11dd742c481f3dccdd9a684bef75934112ab3c4bfcf88927feaa550fad414245ec02a04a7acec2415b1d5340
-
SSDEEP
6144:Cppiuwul8/mNdCLKKop/y2euZRG+D3Wlt5vDCbLFUBGt6L8XwyTeJtRsFBoS:CbityWmNdnp/TJZY+D3mvebLFUMt6dyj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce854c09dfb5aa8bb553c4170705cc98_JaffaCakes118
Files
-
ce854c09dfb5aa8bb553c4170705cc98_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.DATA Size: 512B - Virtual size: 756KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 381KB - Virtual size: 398KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE