Static task
static1
Behavioral task
behavioral1
Sample
c29ae906c1d6c26b5ab794a5a8e479db_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c29ae906c1d6c26b5ab794a5a8e479db_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c29ae906c1d6c26b5ab794a5a8e479db_JaffaCakes118
-
Size
70KB
-
MD5
c29ae906c1d6c26b5ab794a5a8e479db
-
SHA1
1e83bad6f492ec12161cbd788488ca55bac751ed
-
SHA256
eec230142cc324566982a48172240f767ab53e68f011429a6cf4a1ff5450d74d
-
SHA512
20d80e553880181a44be2bb7dabf8340fd3b416ed7713748ebc855b91ab80a2600c947408ca0ce18fdac35944cd5903639962ad6913a5c2020b3365f02b21571
-
SSDEEP
1536:4wM5viNCm5AeCKg6sqsI6HqsBC/+2EDzjqzV+JSiam/De9:4FFTmyZKg7fVG+2EuzVo/D6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c29ae906c1d6c26b5ab794a5a8e479db_JaffaCakes118
Files
-
c29ae906c1d6c26b5ab794a5a8e479db_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 62KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE