Static task
static1
Behavioral task
behavioral1
Sample
29928c01e3f002684c4bf4a995cfed23_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29928c01e3f002684c4bf4a995cfed23_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29928c01e3f002684c4bf4a995cfed23_JaffaCakes118
-
Size
8KB
-
MD5
29928c01e3f002684c4bf4a995cfed23
-
SHA1
eb01eb0d224227efcb21d1ed719abf2739d021eb
-
SHA256
551b8bc32c9c97d9483d75044a6a373a98a0d03b9dc1bb0ca03a127a499e3c58
-
SHA512
98ddadf25f08d7e77427cb1d7a44e1f0d99b0ed142f60f2514f36a8b8d6b1caf33c0dfa0a82a94ba11b0d09f048d498871ec4e2111a705801e13995db994eef5
-
SSDEEP
48:OEPpM6DOsCmbGKcY+KQ6vnZl/3S/G01bXYDIl24BI3J:nPpwbmbGxYBZaRbWR4O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29928c01e3f002684c4bf4a995cfed23_JaffaCakes118
Files
-
29928c01e3f002684c4bf4a995cfed23_JaffaCakes118.exe windows:1 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
ExitProcess
Sections
CODE Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ