Static task
static1
Behavioral task
behavioral1
Sample
bdea3e4fce49b003afde54e0ed1ad152_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bdea3e4fce49b003afde54e0ed1ad152_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bdea3e4fce49b003afde54e0ed1ad152_JaffaCakes118
-
Size
296KB
-
MD5
bdea3e4fce49b003afde54e0ed1ad152
-
SHA1
30235538f0aae2dc503e17eac3e36f3482b3c795
-
SHA256
936a785da94e857b17d43f7127847f50a72d23086870dba4b349318dba39705e
-
SHA512
7a9ad6a0f9cf6d2df73ede5f80bebf6f1b0475f0d668c46f970361d68b82e3a0847abff02c74c94abc5fef49bbdc52805bdb3aa6958e46b1a2bbd7c2cdcfeb05
-
SSDEEP
3072:P10rMQLslst9AhY8yqyrmrG2uNws1703Q:N00ew1ylmrrOhm3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdea3e4fce49b003afde54e0ed1ad152_JaffaCakes118
Files
-
bdea3e4fce49b003afde54e0ed1ad152_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ybqfgs Size: 1005B - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE