Static task
static1
Behavioral task
behavioral1
Sample
429f98e3f43dae966640d1d18b57a79b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
429f98e3f43dae966640d1d18b57a79b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
429f98e3f43dae966640d1d18b57a79b_JaffaCakes118
-
Size
685KB
-
MD5
429f98e3f43dae966640d1d18b57a79b
-
SHA1
a443d60d230c91c05f654cc02b8419d4994c5ef5
-
SHA256
161efc0304a59089948c08e93dfcfbcdcb1d2b11f1c0ed589d54fed95b3e45f3
-
SHA512
7048c4b9114d552169c20c4243f6858bd0dd8ddd1936cfd01ffc1c0d847ec99235b6e7013aa42075139ceac09969b4e1d54c383eac7a56a915e4f01a1fa8110d
-
SSDEEP
12288:XH40DEHkLM0tcp/eTcILTAqXK13ZpxnTmFzL6l3zhF3Z4mxxQ/l5KSz6i3GY:o0Dt14/e/TAG23jwVLG9QmX4l5V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 429f98e3f43dae966640d1d18b57a79b_JaffaCakes118
Files
-
429f98e3f43dae966640d1d18b57a79b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 369KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE