Static task
static1
Behavioral task
behavioral1
Sample
29ac8be1ce38eaf79c30ce2d4455d828_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
29ac8be1ce38eaf79c30ce2d4455d828_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29ac8be1ce38eaf79c30ce2d4455d828_JaffaCakes118
-
Size
56KB
-
MD5
29ac8be1ce38eaf79c30ce2d4455d828
-
SHA1
41787821fa98d26af97e2a46075ac9a6c0b9384d
-
SHA256
ab376ecbc8de5a23746a6246faf742403fd24cda167810d0775b71cb548385f7
-
SHA512
7ff29000997e899ed386b9241e62976c0ce67fbf20fd491f1a0ec33969cfe410d073681756d1c2a338834ca1e95f1d6073c45efad5255111f6387248720b5a5f
-
SSDEEP
768:oenpof+rFzlAA3h11JbLWdm20wEJD5gq3RkOBaSyrJumqz1PtJ7ddooxxNa:VnpbVJWmDC+paBrJumm1PtJ7ddo2a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29ac8be1ce38eaf79c30ce2d4455d828_JaffaCakes118
Files
-
29ac8be1ce38eaf79c30ce2d4455d828_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.TEXT Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ