Static task
static1
Behavioral task
behavioral1
Sample
29f9ab1db8e57b21f875eedfb9be2b39_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29f9ab1db8e57b21f875eedfb9be2b39_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
29f9ab1db8e57b21f875eedfb9be2b39_JaffaCakes118
-
Size
52KB
-
MD5
29f9ab1db8e57b21f875eedfb9be2b39
-
SHA1
61269e923c5642fd59f5981112026c396ca55371
-
SHA256
d8e8ccdaa161688473a954669ac45e9e5f5c0df0804d97f94b6c0e5f44b3ffec
-
SHA512
4cfe13870e8b0c752c1023244a209d2d7b5718bcea173eabee581cbd1f3e934fb2bfaf4ad8d3b9e3eae08729ad6c472d1950d688c0c4397312f6ccad929a1f8a
-
SSDEEP
768:RFCn+kwlRe7OZ/UMv0E3Pu6eSU+x8on8yMx3:vM+k+Re78/vT3xN8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29f9ab1db8e57b21f875eedfb9be2b39_JaffaCakes118
Files
-
29f9ab1db8e57b21f875eedfb9be2b39_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fs Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE