Static task
static1
Behavioral task
behavioral1
Sample
29030e854a5501c6b989de4d27329433_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29030e854a5501c6b989de4d27329433_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29030e854a5501c6b989de4d27329433_JaffaCakes118
-
Size
410KB
-
MD5
29030e854a5501c6b989de4d27329433
-
SHA1
7fcfc2bd341804b3322dd246b5de69e9a0cc2ce1
-
SHA256
a4ba87716763702b0a7085bea00f29cfe2b45cc3eddc1652e0e74e86d6448299
-
SHA512
60bc4c74848d8c3cc22e5373549a725d0c0fcef8db67ebe8dce115d657e8d96feb3ba7e2ab23d1d1a3b2f8de1f166489e22964d21042cf28c3eaa41dd326e280
-
SSDEEP
12288:uPhQJw7d9kcEEMjpjq5Hfpdka9yU+3AAMinBH:gSAd9kcTapG5/pua9cd3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29030e854a5501c6b989de4d27329433_JaffaCakes118
Files
-
29030e854a5501c6b989de4d27329433_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 378KB - Virtual size: 480KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE