Static task
static1
Behavioral task
behavioral1
Sample
29c54157c8ed187fd824de9f1e8d5d25_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29c54157c8ed187fd824de9f1e8d5d25_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29c54157c8ed187fd824de9f1e8d5d25_JaffaCakes118
-
Size
385KB
-
MD5
29c54157c8ed187fd824de9f1e8d5d25
-
SHA1
2849809870e54355a050e535860db0fe9cfe3710
-
SHA256
ad510c2e29dac6794fb2bfb957dae066d8b4acaf049507c056372eed5b42fdb4
-
SHA512
d8ed87b7b9989ac964969bbe1b3464c1ff22d024ed3a0e95066b3efef0838891ed452c74c5a222fbb34bf240935d3f0a5eea96aa3ee37aec5c38f62cf8e7db77
-
SSDEEP
6144:S3DcCv+ipcfzOpXquqtlYQAX8zTFlq2OAEhb+7CMl:AArGqbqQA6BlqnAEhb+7CMl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29c54157c8ed187fd824de9f1e8d5d25_JaffaCakes118
Files
-
29c54157c8ed187fd824de9f1e8d5d25_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 658KB - Virtual size: 658KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ