Behavioral task
behavioral1
Sample
JaffaCakes118_e789c4a6e36c0b05b85435b072be293733d4d0ff9645715e5e71f8beedbfede9.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_e789c4a6e36c0b05b85435b072be293733d4d0ff9645715e5e71f8beedbfede9.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_e789c4a6e36c0b05b85435b072be293733d4d0ff9645715e5e71f8beedbfede9
-
Size
488KB
-
MD5
2cf8c5a045301578eef001aec7ed4070
-
SHA1
a7dbcd1b57c49305d59d79ed814cb89b5f40dd5b
-
SHA256
e789c4a6e36c0b05b85435b072be293733d4d0ff9645715e5e71f8beedbfede9
-
SHA512
d31d8e332ab1e45a4b76003d2298d6c5074446f10c19e55b3f9b1f8234fd3597dd750f371ea9feaf73e38bb75a794dd9f24d8f3b49d615c3e02b6382c4386b3e
-
SSDEEP
6144:boCFQ1GkSde3G3vdqXcak5oFfAeGRoglOSKpk3b13bJx+sAOZZsWX5BcZ5:boCqKde3G314caiojGRoaOd+2sfZs
Malware Config
Signatures
-
Remcos family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_e789c4a6e36c0b05b85435b072be293733d4d0ff9645715e5e71f8beedbfede9
Files
-
JaffaCakes118_e789c4a6e36c0b05b85435b072be293733d4d0ff9645715e5e71f8beedbfede9.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 331KB - Virtual size: 330KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 1024B - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ