Static task
static1
Behavioral task
behavioral1
Sample
ce9ba320d61886d5b005d31300a7cbf8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce9ba320d61886d5b005d31300a7cbf8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce9ba320d61886d5b005d31300a7cbf8_JaffaCakes118
-
Size
685KB
-
MD5
ce9ba320d61886d5b005d31300a7cbf8
-
SHA1
9d901d652ec3f7eb7a6df08984dd53815a265b25
-
SHA256
bf290ff4e9445e9d72b226340c90c273054996ad028c535f3abfa841cbc03b6d
-
SHA512
042bf59920ef587a42513c3d45867f6d96b50cef4e12c07ee37c553c7691e2e4003a07fdf30b80023f4ce18b8faa41fc485cabf47641f828267f48ce6af85da8
-
SSDEEP
12288:Zcp0fiR3PcGLxe0D94lh5YxAsWJhBDUrb+rxCIjTgwb+AdUzBqoPfGbRi3/wCWQM:GiaR3Pjx7D94b5YqJTDFCEgwNdUzBqC0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce9ba320d61886d5b005d31300a7cbf8_JaffaCakes118
Files
-
ce9ba320d61886d5b005d31300a7cbf8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
BSwzKN8E Size: - Virtual size: 782KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fIuzDTbm Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
4PNz4gjY Size: 672KB - Virtual size: 676KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6F1fo5Q0 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UyccUHKs Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HHIjMyNd Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
d5O1UcAc Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ