Static task
static1
Behavioral task
behavioral1
Sample
29f5b6249ea1d3d6a61696a6b2682283_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29f5b6249ea1d3d6a61696a6b2682283_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29f5b6249ea1d3d6a61696a6b2682283_JaffaCakes118
-
Size
234KB
-
MD5
29f5b6249ea1d3d6a61696a6b2682283
-
SHA1
3f606faba4473fce6cf087afab2b8396b250ad37
-
SHA256
084194ce6ef1f3f35c7c6d0c35e2a8b9e06748d3f5c5eadf8738e9b0f6ed44b2
-
SHA512
59c2793b6a43b46d61a8ed4042a96720fb97447ad1eae0225af56083f0d0e07a6949b25b184be37657440a7d1f67a0a96b8fd9f1f46c1f17d773f44926deca34
-
SSDEEP
6144:+0/H/DlA06gE/atruYM2OHFozMSQBIx91fo3AN:+e7O0RbFuxMMSGIpmI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29f5b6249ea1d3d6a61696a6b2682283_JaffaCakes118
Files
-
29f5b6249ea1d3d6a61696a6b2682283_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 231KB - Virtual size: 231KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE