Static task
static1
Behavioral task
behavioral1
Sample
2429c420629966c32653d066b2fa9b86_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2429c420629966c32653d066b2fa9b86_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
2429c420629966c32653d066b2fa9b86_JaffaCakes118
-
Size
1004KB
-
MD5
2429c420629966c32653d066b2fa9b86
-
SHA1
229375bc1fa10d229eb4473ce773ce32b8e551a6
-
SHA256
e167dcc3a8bc64952432f27e213a3f22e0047192d0f28b4a39552b25645b0321
-
SHA512
f9917e97155b9a271cb6b6a45435e98329ea7363cd83cebe57bca9b833f3f66e38aa665a16d8714ab0b659ea8ac189099adf908434f13fac82b4d0df7580a5c9
-
SSDEEP
24576:i8VPMruV3w7PMjHt1mKD2wQSgrnvOZXnnxFHquA/26ZEDnrS:iOMCV3w7PMJLD2JROpnrBATD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2429c420629966c32653d066b2fa9b86_JaffaCakes118
Files
-
2429c420629966c32653d066b2fa9b86_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ