Static task
static1
Behavioral task
behavioral1
Sample
29fd41eea78b72e8e35deb29056f4b36_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29fd41eea78b72e8e35deb29056f4b36_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29fd41eea78b72e8e35deb29056f4b36_JaffaCakes118
-
Size
112KB
-
MD5
29fd41eea78b72e8e35deb29056f4b36
-
SHA1
d3cf1e7ba4c736b552b31e072372df4285e30dae
-
SHA256
a148182268f741b31d365cc957879fbbcb57d4776c93d146b2c398303aae1c9e
-
SHA512
525be3eaa92057712234a18490c4f1814c2975fabfe90dfaed93a3f0dd9931526d4d498b5901d091fbcf11445762482abc33369358efce7220c4753c76341187
-
SSDEEP
1536:vqG6rkgpef43wWH08sAjT7Ue3iP5H05xLt47tj4V4rLKP3VEha4Rdqo43:SG6w9wNH0dh903J49kyaBv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29fd41eea78b72e8e35deb29056f4b36_JaffaCakes118
Files
-
29fd41eea78b72e8e35deb29056f4b36_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
CRT Size: 77KB - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ