Static task
static1
Behavioral task
behavioral1
Sample
bead194fb8cce1863fe7d505576ddc99_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bead194fb8cce1863fe7d505576ddc99_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bead194fb8cce1863fe7d505576ddc99_JaffaCakes118
-
Size
368KB
-
MD5
bead194fb8cce1863fe7d505576ddc99
-
SHA1
17ac98f6bc5ef7986888dae93981ced2f1b7ba9d
-
SHA256
511d20fe30655fb6cf4ccbd8d0e3b7b22d904118418c666247d8d7957461eaf5
-
SHA512
597386218188e9ee93f91170071b0608c28be678d616424bb406e8c9a8711b2dc3997ec1f21ea3f05733045a6c463aacae850c4edcb46b0a9a3f7f1622f75021
-
SSDEEP
6144:8ITqqULirNI8R19idR8qLOLia4wIKQQ+:VrdR19wa4w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bead194fb8cce1863fe7d505576ddc99_JaffaCakes118
Files
-
bead194fb8cce1863fe7d505576ddc99_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
0 Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE