Static task
static1
Behavioral task
behavioral1
Sample
29f0de93d2fb5cccf60c2d0218fc6b5b_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
29f0de93d2fb5cccf60c2d0218fc6b5b_JaffaCakes118
-
Size
100KB
-
MD5
29f0de93d2fb5cccf60c2d0218fc6b5b
-
SHA1
30cd55d6ceed8beaae42032d1910bbf40b9d89c7
-
SHA256
be6bcd531c88e189b57b3b7a3939eb561980fe9a49a6bc73f620441a0237b8b7
-
SHA512
552773d0cd04be2931c039f625fce9a1f792fa7d5d54d914a2b264120e261132ce69b22b188fdf62fe3b32b57a86170002dc9c31e92c3652d8fb3180b70535fa
-
SSDEEP
3072:WAOyC0+hxgcjbYvcLZGT1BGVk8jwaaHw7Koj4rDMi+W:WkCN0vuE5LZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29f0de93d2fb5cccf60c2d0218fc6b5b_JaffaCakes118
Files
-
29f0de93d2fb5cccf60c2d0218fc6b5b_JaffaCakes118.exe windows:65535 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 188KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE