Static task
static1
Behavioral task
behavioral1
Sample
a28a02470043dfd38fc413aa36a05366_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a28a02470043dfd38fc413aa36a05366_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
a28a02470043dfd38fc413aa36a05366_JaffaCakes118
-
Size
89KB
-
MD5
a28a02470043dfd38fc413aa36a05366
-
SHA1
258e8b86b3371d5155b21bec1ebbb9ac1f209bff
-
SHA256
5a2c9e5a583c9df599401a6bb25b1924b8872569467b9b77327b39435906b99c
-
SHA512
b8723ef27b1a9ceb3bffcce4d5a5c57872e5e31643bac77df9665bd9734297d1f4b96fbfd09598964b04d9c22baa19b439c7d81d760a2be1e0e4666259e241db
-
SSDEEP
1536:u5PEJEPoN7jyesJ3svplw+f2mHzX0AQbsgO79L7k7W0A9mCIjniy:u5PElUJ3MptOmHyO9L7k+MTR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a28a02470043dfd38fc413aa36a05366_JaffaCakes118
Files
-
a28a02470043dfd38fc413aa36a05366_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ