Static task
static1
Behavioral task
behavioral1
Sample
29ad7ca4ca7f4b1d34d4c0a36019dbc5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29ad7ca4ca7f4b1d34d4c0a36019dbc5_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29ad7ca4ca7f4b1d34d4c0a36019dbc5_JaffaCakes118
-
Size
27KB
-
MD5
29ad7ca4ca7f4b1d34d4c0a36019dbc5
-
SHA1
57ef6ef657cccf70f3eb6a286ab44ea010353600
-
SHA256
925c3e7d5cc0299d763c05d541f104ab1a2f7a8c5fc44931476d4bdd965d4e96
-
SHA512
64c9abce25d6c79caa6e4b1a6a16d08aa21114d8d091169d3773211166205cd4a87a013c36e55d982bbe06485fcc30f3d44b4895104945d8ead10c8f69888839
-
SSDEEP
384:j8gxMjSlgrZNWfrXjmz+yBDUulvSqw/2krrcYYmraZ+D5u17PYbdff4RJyI:wgxMjS6CjXjmzMuIqEb/FraZWuubdf2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29ad7ca4ca7f4b1d34d4c0a36019dbc5_JaffaCakes118
Files
-
29ad7ca4ca7f4b1d34d4c0a36019dbc5_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 773B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ