Static task
static1
Behavioral task
behavioral1
Sample
29796e156cd0bba10658ca87aa3e78f6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
29796e156cd0bba10658ca87aa3e78f6_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
29796e156cd0bba10658ca87aa3e78f6_JaffaCakes118
-
Size
8KB
-
MD5
29796e156cd0bba10658ca87aa3e78f6
-
SHA1
0197f6c66b1049a3a3c9aed97ec844f1664e39ca
-
SHA256
6bf30c1a27f035b1a7e1b6f722d32115f98b39e54cd1c1add45fc46acb2b4988
-
SHA512
af3f6055b5db7d7a5370ff45d5ce5668fc15beb96cf8d26781921524eaa3daf75ebceca5a91eefdc1ba7412e2467e43f8d75e541856ff6ee8817a1f7c5ead039
-
SSDEEP
96:6GPhaa2M+EcOFOieGuuRh7l4mVO1kIXAcx2NhmU9wX:6Qx+EcOFSG/em8kIwcxKB0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29796e156cd0bba10658ca87aa3e78f6_JaffaCakes118
Files
-
29796e156cd0bba10658ca87aa3e78f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
upx1 Size: 321KB - Virtual size: 788KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE