Static task
static1
Behavioral task
behavioral1
Sample
28c7e396e1c1cecc4311fb522eb0ab94_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
28c7e396e1c1cecc4311fb522eb0ab94_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
28c7e396e1c1cecc4311fb522eb0ab94_JaffaCakes118
-
Size
509KB
-
MD5
28c7e396e1c1cecc4311fb522eb0ab94
-
SHA1
72eac9e7ac522adfb5160509617487e604d16dc4
-
SHA256
6a6806f42a4ff0d39e8130755e288f770662341abdd120d4d31bc734a0589c9c
-
SHA512
af2552b2575bf0517d960de955dc3442203bd3ebe710919737374091bc92e098b68d1b473625e04aa0957a207f3f3d37b134a41202ab72565fa0e8771a2649be
-
SSDEEP
6144:cZBuNpUyd0ijcUtdWuOJT2H3FTpYAGPBf24FFfAE20iOzhGwkYky80Jq/o1iz7I:cZSayd0ipruR8qjP1FFFOOzhEYkT/a8I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28c7e396e1c1cecc4311fb522eb0ab94_JaffaCakes118
Files
-
28c7e396e1c1cecc4311fb522eb0ab94_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 365KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ