Static task
static1
Behavioral task
behavioral1
Sample
ceb3e1dd9ec9d1a4f018983dcf9617e4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ceb3e1dd9ec9d1a4f018983dcf9617e4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ceb3e1dd9ec9d1a4f018983dcf9617e4_JaffaCakes118
-
Size
111KB
-
MD5
ceb3e1dd9ec9d1a4f018983dcf9617e4
-
SHA1
7c460eab29330730fd0bb5d2f1ee4c09be497c77
-
SHA256
ae0fbe13eee449edc579f3ec541b8bb06085be249bf0f112c26b65b997e0ea5b
-
SHA512
fa1055b74bd4478c6a7f162d84ab4b18959746c1b779567e8a9b44b96f12e908a4d849e9cc5d81861fa5862c5261e1642de1d8435f2af3744ac9bcdb29ec0b14
-
SSDEEP
1536:4fNmbhzImHwaEizpyq3wOdHR4C2tyS9/bsGamA0+Z0lgbAYGCrInW97x3j0NH4zK:4fN8EmzpFH+NTbsDC+Kl9gooZ5Vxpp2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ceb3e1dd9ec9d1a4f018983dcf9617e4_JaffaCakes118
Files
-
ceb3e1dd9ec9d1a4f018983dcf9617e4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
q9gfwkj Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zsmcb Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
y4 Size: 53B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE