Static task
static1
Behavioral task
behavioral1
Sample
29be2b6b7b36cc02df7279f24776f214_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
29be2b6b7b36cc02df7279f24776f214_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
29be2b6b7b36cc02df7279f24776f214_JaffaCakes118
-
Size
1.7MB
-
MD5
29be2b6b7b36cc02df7279f24776f214
-
SHA1
48f013466ba2e707f5d8228ffafa30ad20be9d8d
-
SHA256
0ece08a58740533e42052787b7613d6c7bc257cd32c29f2a2da8a9b7849992e5
-
SHA512
ae1991e3a0038fb157ff18ab804c02d01c51aaa13616e0f90b1219fa778d12d92193c65c1d8df56650366a3b9b89567cd211323593e5ff671487be4c3c3a7d84
-
SSDEEP
49152:18ozho/Z/R0yQG4A9JQW1UPiR0tFZiDrjCaE:SShip0yQUJx1RJDPCJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29be2b6b7b36cc02df7279f24776f214_JaffaCakes118
Files
-
29be2b6b7b36cc02df7279f24776f214_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1.3MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 92KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 169KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE