Static task
static1
Behavioral task
behavioral1
Sample
29b6edcfd4d04ed0fe85cd3fa0452e59_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29b6edcfd4d04ed0fe85cd3fa0452e59_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29b6edcfd4d04ed0fe85cd3fa0452e59_JaffaCakes118
-
Size
98KB
-
MD5
29b6edcfd4d04ed0fe85cd3fa0452e59
-
SHA1
a73ca09c0d3174d9858b5068ddc123daaf354e15
-
SHA256
c8efa8e92020161f7b6c5dd5142075791b64536bfacc0ba9a403c82e4dd162c0
-
SHA512
32d2b0d5babdb2a9355bd2a96fe078dde84a55acc4cf872713fbacde5e6fe5a787a86d3cac9b0cb822fd2f72a13f841958eddb518855ecca500234e78cec641b
-
SSDEEP
3072:CRlwxw3vVnd8K2tTV/GHhw08wXoH6oHKtBoM:rwVnKKgKz8w4H6AKtBT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29b6edcfd4d04ed0fe85cd3fa0452e59_JaffaCakes118
Files
-
29b6edcfd4d04ed0fe85cd3fa0452e59_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
unpacked Size: 554KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
unpacked Size: 253KB - Virtual size: 924KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
unpacked Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.snaker Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE