Static task
static1
Behavioral task
behavioral1
Sample
29ef1ece6f72fdfab24efbea661d6d67_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
29ef1ece6f72fdfab24efbea661d6d67_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29ef1ece6f72fdfab24efbea661d6d67_JaffaCakes118
-
Size
59KB
-
MD5
29ef1ece6f72fdfab24efbea661d6d67
-
SHA1
b74e7bd99d71e65e79cb83e9dcbfac9b2fe9bd73
-
SHA256
1bc3807dcd77890c0dc9b16d82e6b4c01cbd220b37c4f1f5aa273571abe34357
-
SHA512
0b679aa9ba7fe2629022842bbf83dbf0d76b2d91de7d1c18e01b985183739a1714dbf11d20845b4ebc8833d6f7e07741b839ae2a2cc20e8b8795bab29ec96dc4
-
SSDEEP
1536:42o4hQGBNFmx6LWVeJV0wWN+o69m32uXZgo+u38L9hNJ32gA:Q4NLF9WVx+oWIipuML9hNYx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29ef1ece6f72fdfab24efbea661d6d67_JaffaCakes118
Files
-
29ef1ece6f72fdfab24efbea661d6d67_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: 512B - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 35KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE