Static task
static1
Behavioral task
behavioral1
Sample
001428be2114fbb28d1dd9cbe5c28c22_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
001428be2114fbb28d1dd9cbe5c28c22_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
001428be2114fbb28d1dd9cbe5c28c22_JaffaCakes118
-
Size
112KB
-
MD5
001428be2114fbb28d1dd9cbe5c28c22
-
SHA1
f2fa69a2230aafe5018fc7e1e4484b96a88e51fd
-
SHA256
f264dfe2ed79326b4958aca5713fd159fffe5b6f0f5111713f0594bea979359e
-
SHA512
d8675d57bea12a0643b72f94008c1daa4d61a9727ff4b4246946e7cf28fddcb52c52f6a0d56e0185bc63754a05fd595ea86524ade8aade6bde683c8db74cd046
-
SSDEEP
3072:6ASixJBsih3z2ljth4RkKaSbxd+AFF8pry38QJnr3mA:6ALxJBs50kBSldTFFuFQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 001428be2114fbb28d1dd9cbe5c28c22_JaffaCakes118
Files
-
001428be2114fbb28d1dd9cbe5c28c22_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 7KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 28KB - Virtual size: 153KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE