Static task
static1
Behavioral task
behavioral1
Sample
29b05e5db29ac2fa752b6481b5718ef7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
29b05e5db29ac2fa752b6481b5718ef7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
29b05e5db29ac2fa752b6481b5718ef7_JaffaCakes118
-
Size
85KB
-
MD5
29b05e5db29ac2fa752b6481b5718ef7
-
SHA1
60b2cf01f3a98f91bdd8b87b903403bc7cc40539
-
SHA256
5dc47fc3241b3c859761509d803c95dc9cefefc00d1bd1c2032686472ba5e897
-
SHA512
4e2f87fbcc592116f4f41c24ab6333b6bad401f28aaed2ac3cae0e93bf6ee9217ba3fe4561847c54119584dfc4f1b0e6f2132532575ea23667483efa48c8c3c7
-
SSDEEP
768:Pc7riafjejtit0v/tmg1nomJ8Aq80d9lCZL2NSB3X1/ic7ri9gU7r9qv:PcXXE2MYgCmur3d9l2ZpicX2DX9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29b05e5db29ac2fa752b6481b5718ef7_JaffaCakes118
Files
-
29b05e5db29ac2fa752b6481b5718ef7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
asdef Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
htrhrgf Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ahmet Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ghrytu Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.AoRE Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE