Static task
static1
Behavioral task
behavioral1
Sample
0beddcc1fbfde7ad6bed6bd70925c81c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0beddcc1fbfde7ad6bed6bd70925c81c_JaffaCakes118
-
Size
2.5MB
-
MD5
0beddcc1fbfde7ad6bed6bd70925c81c
-
SHA1
65f7839eefdb87ba6c0ab166a585b791465a6e70
-
SHA256
6638cfabf4efe1858558bb25e79d11f0a91d8e27c68a9d10c762a0bf9944ddda
-
SHA512
fd3d7d798fc61e2b4b7a3dc7c02da6b5e887a057852356e84c7c211e74a3a411c184be8ca3218429b44fb6bb4c224eb79b5982e92d9e1bee360f096917939b33
-
SSDEEP
49152:+yLp65DaAE4YFoXntIbmNrT3w7aL/x3H7zrsYYY7TN3Ss:+O65OArohmNH8aLJ7UYFl3Ss
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0beddcc1fbfde7ad6bed6bd70925c81c_JaffaCakes118
Files
-
0beddcc1fbfde7ad6bed6bd70925c81c_JaffaCakes118.exe windows:5 windows x86 arch:x86
cccf950c365b29b433a1f91ee54f8843
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32 kernel32
Beep Ӳ0
Sections
.text Size: 1.7MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 732KB - Virtual size: 732KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ