Static task
static1
Behavioral task
behavioral1
Sample
29766cb780000b27a45747cdb9d4e1f5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29766cb780000b27a45747cdb9d4e1f5_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29766cb780000b27a45747cdb9d4e1f5_JaffaCakes118
-
Size
395KB
-
MD5
29766cb780000b27a45747cdb9d4e1f5
-
SHA1
fd9921e475d32e980655fad0c8eef62d34b6a5de
-
SHA256
bada0d3bbc6f11f4f936ffb78c0dedfa0f9dcb589b2e1726cdd3c5fa4cb85acc
-
SHA512
1b7d03af016046da6d02757bf486058763307d34e9c86e0c036d37adeba9f58f60a685b7b5db9a9ddf9954b8a1ca4e7dc4303e2d24e4c7602f6119422d8f9c66
-
SSDEEP
6144:dygN2fYFzGvKeZKgLMPCZlsEm9O4Vqb82eIMLxd4b8865Nap3y7mkO4:dygYfsGvKPYlsfbhNIcxub886jap3+mO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29766cb780000b27a45747cdb9d4e1f5_JaffaCakes118
Files
-
29766cb780000b27a45747cdb9d4e1f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 38KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�������� Size: 352KB - Virtual size: 848KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE