Static task
static1
Behavioral task
behavioral1
Sample
29a677b26924578f98cf3d776f48f182_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
29a677b26924578f98cf3d776f48f182_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
29a677b26924578f98cf3d776f48f182_JaffaCakes118
-
Size
149KB
-
MD5
29a677b26924578f98cf3d776f48f182
-
SHA1
d56d25e8012f5dee1be1f19cc0d2c962f78691e4
-
SHA256
c15e8a06f818a6b6651d12c71220ddb4e4edffa06c07a95d67c6fd6028715a28
-
SHA512
73e2cec58bcbd63dec7fa9bdb0a408a8db34e04c1a77eec76c81ca3c5c4bffa945fec4960e3d7c45e90dc1bde87d57997d6d20c1e628c410654454e739255429
-
SSDEEP
3072:w363GESSR+sYG07irErIa5lkVMoWHT5xJH1vT6wCR:KKSC+mFEEmkdWzbxRTnc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29a677b26924578f98cf3d776f48f182_JaffaCakes118
Files
-
29a677b26924578f98cf3d776f48f182_JaffaCakes118.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
Size: - Virtual size: 744KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE