Static task
static1
Behavioral task
behavioral1
Sample
29b7cee1f18957c180b32a3e4d966b41_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29b7cee1f18957c180b32a3e4d966b41_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29b7cee1f18957c180b32a3e4d966b41_JaffaCakes118
-
Size
1.0MB
-
MD5
29b7cee1f18957c180b32a3e4d966b41
-
SHA1
9d0c174019fa61392c787f059ba7d6bb4c075447
-
SHA256
bd15e7ec39322f9d733d64b7b8dd3b1e427fa95365af0e3468c373245a02767f
-
SHA512
e33fd65a61e8dc7b9e10b1b2c521bf5a66e18373d68e31d9d3c5f3038da6bb5e7afed40b715d0be7486a15a213e5b82f37cda546b26cb3a5700fcfc36231515d
-
SSDEEP
24576:fFZqhOBnVyK23C6OoYMLiVcKtVx4MiuzO6R86jWWKLVpwsKoah66:fFOOLWSor2VcKbxaGR86AssKdc6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29b7cee1f18957c180b32a3e4d966b41_JaffaCakes118
Files
-
29b7cee1f18957c180b32a3e4d966b41_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
test Size: - Virtual size: 988KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 625KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE