Static task
static1
Behavioral task
behavioral1
Sample
bebf37b126b53bd37c94f6f9dfe97fb5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bebf37b126b53bd37c94f6f9dfe97fb5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bebf37b126b53bd37c94f6f9dfe97fb5_JaffaCakes118
-
Size
1.1MB
-
MD5
bebf37b126b53bd37c94f6f9dfe97fb5
-
SHA1
05ea86354d3037466fbb5b9f745e5dfe4ae25e2d
-
SHA256
17a275e22bbac795afc7fb2586bbd3598795ad7d203b46bed2709b16efec7664
-
SHA512
affaf361d98ee3e96d57496f8d1e9a92dd1f2a0f8b2ae5331ba1990bf83deaeb96bbcc1b7079640b27860a061c2016eb049e560d0830e631433dc3d87d155aac
-
SSDEEP
24576:xijr8NYzYbOhBQv7QnowXNrT2DtCxUHxCwdlsYT0q:xijr8NYCOhS72hxUTX0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bebf37b126b53bd37c94f6f9dfe97fb5_JaffaCakes118
Files
-
bebf37b126b53bd37c94f6f9dfe97fb5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 307KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 106KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 632KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE