Static task
static1
Behavioral task
behavioral1
Sample
ceac9f3839babb2b775a53afcaadf2b5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ceac9f3839babb2b775a53afcaadf2b5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ceac9f3839babb2b775a53afcaadf2b5_JaffaCakes118
-
Size
14KB
-
MD5
ceac9f3839babb2b775a53afcaadf2b5
-
SHA1
c7b518e3579ac38da0877f3685cb3cf3e818a8a5
-
SHA256
e9288f13e84bfea7308ed7438ee90d7a9d62bf7bef9abee61242545ffa28edf0
-
SHA512
803e878a5c15e7d92c23711ba213e9b14296e4a4c056dac61f47b065b77c1fb272ab3613acfb12b42b582214f79a3123162272332fb29bd3cf019712c7acc1a8
-
SSDEEP
384:4lIPnie6D8pua2ulIPnie6DR+mFSfplnlyb:4lKnijDnajlKnijDV0f5yb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ceac9f3839babb2b775a53afcaadf2b5_JaffaCakes118
Files
-
ceac9f3839babb2b775a53afcaadf2b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.llydd Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PopSky Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE