Static task
static1
Behavioral task
behavioral1
Sample
29c65e9501510a9b3450a606a3d44ba1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29c65e9501510a9b3450a606a3d44ba1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
29c65e9501510a9b3450a606a3d44ba1_JaffaCakes118
-
Size
164KB
-
MD5
29c65e9501510a9b3450a606a3d44ba1
-
SHA1
d1fd130382c0c99f9252510154e6b0f6ed7eb7ea
-
SHA256
2728fba491411869630bdb4d31db69c411daad4693df7a9b461275e01113f585
-
SHA512
87636c7b36c62de5e49cfae58fd5267263214ea898accd56000b5e1f4cbe6f996d09234529a7032696fbf2fa6babb99ddbee45c5a5aef9fe04362acc15c4f7ef
-
SSDEEP
3072:GjlaVkyPFwDvF/yhDh3r2e0LjC7iReQ9Q9vBSNKG:AS8N/yhDBrT0XC7Kv9QrFG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29c65e9501510a9b3450a606a3d44ba1_JaffaCakes118
Files
-
29c65e9501510a9b3450a606a3d44ba1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE