Static task
static1
Behavioral task
behavioral1
Sample
629da2bb1e46f42e72cd5a6686a73429_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
629da2bb1e46f42e72cd5a6686a73429_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
629da2bb1e46f42e72cd5a6686a73429_JaffaCakes118
-
Size
1.3MB
-
MD5
629da2bb1e46f42e72cd5a6686a73429
-
SHA1
7d0e7cc99e7661a2049bd8b1b933c138224c39ce
-
SHA256
0091cab148ebbd95c4ba77bf4dc4128434058c54807401f6bc68efd45dcc22e3
-
SHA512
df27afb915bdc03752432a97212e5d72d858573b90463e81ecb0f81b3264a339850c46aad7e9008349d5a0d7d6c23a7176fea6a5144b5f7443c5eabbdd2cd2f9
-
SSDEEP
24576:tNUs+SqYgeneup20ZOmJKAjF/TsgKtkWQ8cZEIFaqCykpngbhmSttsOIcvYad:ss+Szreup1OmfjFzakWQtaxqCyk+Pl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 629da2bb1e46f42e72cd5a6686a73429_JaffaCakes118
Files
-
629da2bb1e46f42e72cd5a6686a73429_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
rwbh Size: 1.5MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mrw Size: 64B - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
chmrxc Size: 48B - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmsx Size: 64B - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE