Static task
static1
Behavioral task
behavioral1
Sample
f28009a68e7e11e5db256e795f30014a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f28009a68e7e11e5db256e795f30014a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f28009a68e7e11e5db256e795f30014a_JaffaCakes118
-
Size
22KB
-
MD5
f28009a68e7e11e5db256e795f30014a
-
SHA1
d4437a5021297cde55df3c6dfdd71ab39047987c
-
SHA256
1648cebd91666e83186ff63108944efebe0797d8a65c928f61c5fd30745ad4e6
-
SHA512
76923a0214c76cf5a5f4f261e7355b4f2d0190c0606e0f080202f122bef530af3e6ae8cd591d2ffefb4b18747d188ed1a88cf79479f1ad4a625e50dc436af717
-
SSDEEP
384:b40h2vD6h7Z312YJSLlcL+FuVkmyT2FVG62c8wJoFl/V3Gcyp4ziSqC:Dh22H312YJSLlcCFuKmyKFVjj8sq/kPs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f28009a68e7e11e5db256e795f30014a_JaffaCakes118
Files
-
f28009a68e7e11e5db256e795f30014a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE