Static task
static1
Behavioral task
behavioral1
Sample
29669e2fa01d1458b81277822766088f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
29669e2fa01d1458b81277822766088f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
29669e2fa01d1458b81277822766088f_JaffaCakes118
-
Size
1021KB
-
MD5
29669e2fa01d1458b81277822766088f
-
SHA1
08ad3c5f5e6b8032604f9bb433a05a1e687dae71
-
SHA256
ac4e7e043b70b72320da98d6e94ed03764046d35b61a1b9e2b37a7689b117934
-
SHA512
4b6e22d5197132a7fa685781b2896022803a4d2fc8f5ecd02ad562185d7d096366e3ecce9ba3241e6f58b125ca5d0d4f9a89f57c5d47fe0a0077e71412688d72
-
SSDEEP
24576:s5RSMWHO6SHPCAPVuvCam6XHylqJ25vvVKWiL0Knb8jedNW:sfSMWuHHwY6XSls25HoWCbFNW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29669e2fa01d1458b81277822766088f_JaffaCakes118
Files
-
29669e2fa01d1458b81277822766088f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.9MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE