Static task
static1
Behavioral task
behavioral1
Sample
29a66c9442e34e0c092f083b4f533b18_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29a66c9442e34e0c092f083b4f533b18_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29a66c9442e34e0c092f083b4f533b18_JaffaCakes118
-
Size
380KB
-
MD5
29a66c9442e34e0c092f083b4f533b18
-
SHA1
c119ccda2780d439d136580369ca5446138b5ae7
-
SHA256
ea87e46ac7267c539f8106df277a8575c5675270c99fa7c75f1b8bd0cee5a334
-
SHA512
368e18576c0a902f6f050200975d4d5d8bd97bb39501f649c5a77f0d81d5f60a3754b2d987a914d6523e14a86ea1fa3b708df66c48b8c6c0da4dafe9594a433d
-
SSDEEP
6144:DdxaOyZ5qOvd8G66aIVtbl5jr6Xy+yQ7RLYzSTonkX:raOyZ5qOvK16V35jrT+J7OWoQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29a66c9442e34e0c092f083b4f533b18_JaffaCakes118
Files
-
29a66c9442e34e0c092f083b4f533b18_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
biak Size: 336KB - Virtual size: 336KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE