Static task
static1
Behavioral task
behavioral1
Sample
GamersHell.url
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
GamersHell.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
brewers.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
brewers.exe
Resource
win10v2004-20240802-en
General
-
Target
f5185ac5182751343e4f201e12f289c8_JaffaCakes118
-
Size
232KB
-
MD5
f5185ac5182751343e4f201e12f289c8
-
SHA1
48107dbdb3c1b163065a3dc3e08c4931ef198700
-
SHA256
1e6aee2f0d0f6f45fb8df8aa403725cb00a7905453e623d352a2b04e6db5c469
-
SHA512
b323c88815c22d74f82283c8274aeb49fa7186c665b1e3e43baed18f1880e9f9d290621de9c75fb6c7b866cd972cc0f9617621017f70a388a267e14bb2717b99
-
SSDEEP
6144:zxFLoEQ4dOXGouVoSy4H963LCy3SkwhlFj6wek:zfoedSt4X/dST3wD63k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/brewers.exe
Files
-
f5185ac5182751343e4f201e12f289c8_JaffaCakes118.zip
-
BReWErS.txt
-
GH3D.txt
-
GamersHell.url
-
brewers.exe.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 844KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA