Static task
static1
Behavioral task
behavioral1
Sample
429c223734bed0ce69790e2f1f1f98bb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
429c223734bed0ce69790e2f1f1f98bb_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
429c223734bed0ce69790e2f1f1f98bb_JaffaCakes118
-
Size
22KB
-
MD5
429c223734bed0ce69790e2f1f1f98bb
-
SHA1
f25da33fe1c6a61a9ff96a29fb5cae19b4823ae0
-
SHA256
9eedf8f8799f6e4945b94cf518e6333b6c62754b1fc30b26e2d249129b5c7708
-
SHA512
79aefcad0e939de4174b9e268c037fb4423344a07c7e690691616cef34442c14982e6004c5423e402e6d51c2fb813050db3d788d9a0fb28f8e51925556d46411
-
SSDEEP
384:FPG6vCN0tYjVuOILan5eMY8/roiCrGgEE6mTpUQGq4uHwOi/c+xylgSDgRFT6i2d:FPRvCWOuO5n5M1rGgEepUVuDik+xAZiy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 429c223734bed0ce69790e2f1f1f98bb_JaffaCakes118
Files
-
429c223734bed0ce69790e2f1f1f98bb_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 744B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ