Static task
static1
Behavioral task
behavioral1
Sample
bedba0282d938bf99f573524635d6d05_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bedba0282d938bf99f573524635d6d05_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bedba0282d938bf99f573524635d6d05_JaffaCakes118
-
Size
714KB
-
MD5
bedba0282d938bf99f573524635d6d05
-
SHA1
c78cd3e53ddda0532c80347c69ee1abe5ad3f074
-
SHA256
c3e8ed8735af6f156395c10867563b12d569938be13c74c512245bafa1e6ea38
-
SHA512
b0cf86443174ed8d65bdb74882cfd658f70943da6ed74922cf0f1192118d12db6f9295a3a5a9e3a954f867e7021c667f3d53d30c0f460eca0d2268f07d948289
-
SSDEEP
12288:irwBRnX/wYVVn0fK6jIs6uesJycwauVWkb5WQJGoeHizGsROl7LTxvLGUal:iMBRX/wYVV0i6L6aJLfMnmqG9l7LTxv0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bedba0282d938bf99f573524635d6d05_JaffaCakes118
Files
-
bedba0282d938bf99f573524635d6d05_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: 498B - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 713KB - Virtual size: 726KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE