Static task
static1
Behavioral task
behavioral1
Sample
29e0c85ef9c62c9d079170c4d66409a9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
29e0c85ef9c62c9d079170c4d66409a9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
29e0c85ef9c62c9d079170c4d66409a9_JaffaCakes118
-
Size
15KB
-
MD5
29e0c85ef9c62c9d079170c4d66409a9
-
SHA1
b2c18189ae34fde75c2d39b02e253a24adfa77fe
-
SHA256
5e3a81141588ea1d80cb804e7f82dbbdcae9b555f40887e94399cfb1b58f35a4
-
SHA512
5df02af2e064fc0acd3a36dc531f90f07fedb42c46d04ad2edc3918710bb104658ec7cdb44f600f53bcfba7607ead689ab57fe2a490edb197b317997a4c2efa6
-
SSDEEP
192:NAJ0eUpyrfIGL2aHc60lGSobp735nXTlMM6jAiBRQxIirGFODanx9ZP+CrkgBw:qJBy4HfcbGPbNrMM68zqkgeaxbP+G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29e0c85ef9c62c9d079170c4d66409a9_JaffaCakes118
Files
-
29e0c85ef9c62c9d079170c4d66409a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE