Static task
static1
Behavioral task
behavioral1
Sample
29c14d4972ad07b6593db8e5c9499760_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29c14d4972ad07b6593db8e5c9499760_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29c14d4972ad07b6593db8e5c9499760_JaffaCakes118
-
Size
378KB
-
MD5
29c14d4972ad07b6593db8e5c9499760
-
SHA1
f03e6c253a5b902d9e8317721470e43217d95ef3
-
SHA256
38dce18c61cdbf5e7441aa34bd5a7fc6147ae8e876648f2b831db0d17bb281f6
-
SHA512
3bfa3fbe41f709e56f7514c4e0c6c44ee852d8aebc086fd1ff8737572be13fbfc66763b993c2e6fb833ec4355fbf67f096aef60eca9a3eb16a208ceaf7b0514d
-
SSDEEP
6144:d3qphrgSbdqx+69K5XiRUD7Eofd5JsaGFkv5B7aoiPkJz97PGAj19DiG:LSbdoYBuO7Eofd5OOBGP4TpJb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29c14d4972ad07b6593db8e5c9499760_JaffaCakes118
Files
-
29c14d4972ad07b6593db8e5c9499760_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�T�60 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�T�61 Size: 377KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�T�62 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE