Static task
static1
Behavioral task
behavioral1
Sample
PerfectBestiary.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
PerfectBestiary.exe
Resource
win10v2004-20240508-en
General
-
Target
7c5f612c73c7e498fdf227548804a196_JaffaCakes118
-
Size
1.2MB
-
MD5
7c5f612c73c7e498fdf227548804a196
-
SHA1
387bf3aa0c921555655a0fcd94cabdb92c819128
-
SHA256
2f41f1ecff50d8f02d5512f2a3effeb00bcc4c616d6ef6c0e92ca2cbf63d0f7a
-
SHA512
d99e886067a587b50f3d7d3eb872c81eff3141ae4fbb126b27bcd73417816c8edbe20286a58a4f5cd9c75ca033dbcc9460f7f579640c9dfbd3a6a8f8823029f1
-
SSDEEP
24576:2bx+uPLmqFmeuj743knGQC3n/HqTfadOeqqVatG24n71f3EYH568y:2bx1DmqFmeu30cG93PebSWI71fUs5Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PerfectBestiary.exe
Files
-
7c5f612c73c7e498fdf227548804a196_JaffaCakes118.zip
-
PerfectBestiary.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
q wDV3 Size: 907KB - Virtual size: 906KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 839KB - Virtual size: 838KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ