Static task
static1
Behavioral task
behavioral1
Sample
29d6c3be5e35debd65cdbc1a7f6eb153_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
29d6c3be5e35debd65cdbc1a7f6eb153_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
29d6c3be5e35debd65cdbc1a7f6eb153_JaffaCakes118
-
Size
23KB
-
MD5
29d6c3be5e35debd65cdbc1a7f6eb153
-
SHA1
8366432eca6cf432f10024aa5a280162c79d43c9
-
SHA256
c0af955caa9e00a104ba9af949f2ee2bdeeb40d2a1d3f31c2d6b52e9c9986544
-
SHA512
37c126e708588e1079b29216e8969b56b1c798b271ff30fd9a287077e0fa856640e88ee56fae4c7b9fc01cf0f1183df64076c152ddd91c3d998382f651e859f7
-
SSDEEP
384:/W793XgW7nxATN2vilEb01lTO/W2EeZG4WDXmhVRFC2Qf7acS5cPAkTb0nOcIfbe:StVxSQX0PTsW6GHXEpC2Qf7aH5WAkT/4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29d6c3be5e35debd65cdbc1a7f6eb153_JaffaCakes118
Files
-
29d6c3be5e35debd65cdbc1a7f6eb153_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 124KB - Virtual size: 4B
���� Size: 90KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA