Static task
static1
Behavioral task
behavioral1
Sample
29f0285d8ba5b2653bb6f6ab5f2a1dc0_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
29f0285d8ba5b2653bb6f6ab5f2a1dc0_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29f0285d8ba5b2653bb6f6ab5f2a1dc0_JaffaCakes118
-
Size
28KB
-
MD5
29f0285d8ba5b2653bb6f6ab5f2a1dc0
-
SHA1
dccd63ab82f34c9bfc3f192ff8dc0779c8026a0e
-
SHA256
021831655202d715e8d71809f9d9c6af3b88520b20dd3f55135e727188b41141
-
SHA512
3f4d6a5ecd69860ce0709c5f645cb4fb796d5e975dbb82de898ddca4b7cb1902b23e3546cd1da25d6a98e118eee74a799107dbd358f3b79724c82cf13ffed3ab
-
SSDEEP
768:Rj6oM20dGsGYQrMJQIlt9TvsrNiQ8UIWDQCPg:4120dQYQrMJQYt1lQJIWD3Pg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29f0285d8ba5b2653bb6f6ab5f2a1dc0_JaffaCakes118
Files
-
29f0285d8ba5b2653bb6f6ab5f2a1dc0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8way Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE