Static task
static1
Behavioral task
behavioral1
Sample
29d0bd4598ad30261421c076cc7561db_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
29d0bd4598ad30261421c076cc7561db_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
29d0bd4598ad30261421c076cc7561db_JaffaCakes118
-
Size
70KB
-
MD5
29d0bd4598ad30261421c076cc7561db
-
SHA1
c1efe846c3b954e49efcd27c62eb005dba202b3d
-
SHA256
d6ea0c5b79615852299e247f71c168d6cfa4e312e9347e2c2f346a8a11a8a7e7
-
SHA512
598269895effaf1ca0386db336de2054fe201c533bd2215231e65da82b9f2f8dfb8926d3c4b32de529d27e2795fc557b73259a497ca2616804c6bba48fcad521
-
SSDEEP
768:x0TdDTSO9ZTqZYotmznafnq5LJcGXb1GBPUaYYvgACCUoScq+8YOxQ3H:6TdytmznUkJTbcBPQtXCUP5raX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29d0bd4598ad30261421c076cc7561db_JaffaCakes118
Files
-
29d0bd4598ad30261421c076cc7561db_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 48KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE