Static task
static1
Behavioral task
behavioral1
Sample
29b139f9b8d5cecfc7d8ab3edd1b2875_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29b139f9b8d5cecfc7d8ab3edd1b2875_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
29b139f9b8d5cecfc7d8ab3edd1b2875_JaffaCakes118
-
Size
57KB
-
MD5
29b139f9b8d5cecfc7d8ab3edd1b2875
-
SHA1
4d938b41e8dec88be7b2a2ef80e15f3c11254b3b
-
SHA256
986a10e9ef4f8de74c392789f60be03872c110b3a615f6b0285173981d2e0b9b
-
SHA512
9cd099de5ddbdb29ae39475cd3a95e98d4705b8b917f87abd1f581e5e874e7ca0c069a4ee19ea38acee61b062ae5b4c96e6c6c3301d690ffc512c62056004b06
-
SSDEEP
768:rTRzJ42a/A2YZFO7asjewDH7k0HHYcZxioDRjiUhcQSq3+FpplACKzIN:rVF42a/5Ya7asDDpxPDMUhci3+Fppld
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29b139f9b8d5cecfc7d8ab3edd1b2875_JaffaCakes118
Files
-
29b139f9b8d5cecfc7d8ab3edd1b2875_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 648KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE