Static task
static1
Behavioral task
behavioral1
Sample
29a89fc733a571d20112b2e5998b5d81_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29a89fc733a571d20112b2e5998b5d81_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29a89fc733a571d20112b2e5998b5d81_JaffaCakes118
-
Size
59KB
-
MD5
29a89fc733a571d20112b2e5998b5d81
-
SHA1
58aeb58cdd712f3d46fa6a0fc931632ceb107425
-
SHA256
141a416f9b77e749392cd7a50d5db006b851c8b138523b494f8594ab47f75f21
-
SHA512
c850c38c04dceeeb20098dd362cb69fa859794acd82ea3040dd9a8d994d87e404b82e8d65e96d1b6600418a8058b32e411e78ece97c572121f497959fdb50bac
-
SSDEEP
768:U7aPFkiQXdI0E3P4jyxIfUnNSRJ67P0voMCHobgwnMBgLmYDmEM7o1XbwHl0lat:U74FkiQtCAjEZNSRJgOoMOobgZwfLwJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29a89fc733a571d20112b2e5998b5d81_JaffaCakes118
Files
-
29a89fc733a571d20112b2e5998b5d81_JaffaCakes118.exe windows:8863 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
ijbziiza Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
yyrrazji Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bryybirb Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iyjyjrrz Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ