Static task
static1
Behavioral task
behavioral1
Sample
29be2fa4f5b4a56e0c79469441389108_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29be2fa4f5b4a56e0c79469441389108_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29be2fa4f5b4a56e0c79469441389108_JaffaCakes118
-
Size
61KB
-
MD5
29be2fa4f5b4a56e0c79469441389108
-
SHA1
c84fd6b64ff9183f022b043b38675a895f2659a4
-
SHA256
ccfd6bb0defe68c2d672f3d01b96dfb2a9f637ae46c87f4b3e79f16eea9261c9
-
SHA512
1d20d5710a420551e2b74e1e0151874dbf71da829908dbc3e938f0e02b4394259df7378da38a52974a81b94dcfd7182cda27b1f75bbd3c4a658b4cfeeeb2c68d
-
SSDEEP
1536:VhSeiB6uW6vIxfMPIY3ra9fuJwiN/P5SqA:VhSeiBlWlfMA4W9kN/xhA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29be2fa4f5b4a56e0c79469441389108_JaffaCakes118
Files
-
29be2fa4f5b4a56e0c79469441389108_JaffaCakes118.exe windows:4 windows x86 arch:x86
8c0a9b3beb0caf2065441f6c5100e1d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__fmode
__set_app_type
_except_handler3
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit
kernel32
GetModuleHandleA
DeleteFileA
LocalFileTimeToFileTime
SetSystemTime
OpenFile
SetConsoleCtrlHandler
GetProfileSectionA
GetStartupInfoA
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ