Static task
static1
Behavioral task
behavioral1
Sample
bee4b4661b19b5d96c0527389c93c482_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bee4b4661b19b5d96c0527389c93c482_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bee4b4661b19b5d96c0527389c93c482_JaffaCakes118
-
Size
83KB
-
MD5
bee4b4661b19b5d96c0527389c93c482
-
SHA1
def9fbd656d89d738f4c1c94a920901abadb76f1
-
SHA256
43c50fe6fd383b83dc9653e80a061de4b12f651a84a74acff8f0d68f7794bb46
-
SHA512
23c9c2e206cbb3f49de8363e2b3b29a1a833a42c2a1acb46079e6e55eccc14a63c2888243b21afb18203bc370fe2b519d3463e21f22b3a7916ecd5a53a0ec9aa
-
SSDEEP
1536:SwTUtb8o2NAlR6SZNPzu4lP+1jRZMEDR45l00m5+M79dUeong:SwTUtbd2N0R6S7PzDlPIVaKR4f/0Hmg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bee4b4661b19b5d96c0527389c93c482_JaffaCakes118
Files
-
bee4b4661b19b5d96c0527389c93c482_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 216KB - Virtual size: 215KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ