Static task
static1
Behavioral task
behavioral1
Sample
29e754137c4094f897e28c313d13de7c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
29e754137c4094f897e28c313d13de7c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
29e754137c4094f897e28c313d13de7c_JaffaCakes118
-
Size
54KB
-
MD5
29e754137c4094f897e28c313d13de7c
-
SHA1
910b92067d55f817b453e297c346d74dd816018d
-
SHA256
639f419c854e37f91be930bf4742e469ccf271883ba37c337b5ffe4fd63b7f11
-
SHA512
d220ca8866bc7e807d67c44dc8f03a569a8a61a3c14f0aacced7ce2a9dcc9a2d0b829bf4e1a134940c790fb502e0c9f78bf27d838af833de36b693fec7243096
-
SSDEEP
768:gXTvxuaOiehYAUjsh/ZXhHeIvVqVvWx9hZHCJTALYArHaNsJCah92Pom8tm7GBb:gXTCiehbkshfXMVvehAJpXsJCah9Ntt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29e754137c4094f897e28c313d13de7c_JaffaCakes118
Files
-
29e754137c4094f897e28c313d13de7c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 183B - Virtual size: 708KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 75KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE