Static task
static1
Behavioral task
behavioral1
Sample
d29b99208705015867a8e05ab6cfdaec_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d29b99208705015867a8e05ab6cfdaec_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d29b99208705015867a8e05ab6cfdaec_JaffaCakes118
-
Size
72KB
-
MD5
d29b99208705015867a8e05ab6cfdaec
-
SHA1
e1f190309c58f0a248c55dcb47289956a29b1625
-
SHA256
03e01c7f64626c1563faededcea0f8e13202b8bade608bcabecb326ffc9e01ce
-
SHA512
9c9a36c766363e2d83d115964629576c84d59078c5fc5ce2dfb75e79d45c2821aa600d3a9d56698f22f1b0b49b81538b9a13151312e2b543ac965b58b65b213d
-
SSDEEP
1536:yniHMkouBiK8dL4Q//H5MjW+CeZD7wjU/T:ynapBiLsIeZD7wjU/T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d29b99208705015867a8e05ab6cfdaec_JaffaCakes118
Files
-
d29b99208705015867a8e05ab6cfdaec_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE