Static task
static1
Behavioral task
behavioral1
Sample
028adb50e50e5a2284c262c762559da6_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
028adb50e50e5a2284c262c762559da6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
028adb50e50e5a2284c262c762559da6_JaffaCakes118
-
Size
350KB
-
MD5
028adb50e50e5a2284c262c762559da6
-
SHA1
d895d412ecd01408fc6866eb2349fd75f12302e4
-
SHA256
41e4865490bf5ec833b8d255cf714db77ac71a19ea8c126e0886d0ca24028003
-
SHA512
b604213ddb1f11edac9e3bff157dbe5d913286453651f0bfc6dd31633a155f15112e54f77bc70ddcd4f058b2fc2352d176a6c83c1771ac75b661f188bc8da8b4
-
SSDEEP
6144:EC8M3jD0eiBv4jHVex5JXLevhyKZgK9Vit0uFLFov6UAzDRXKld/k6Qwho2zctMI:J/XiBvceNDKKK9VELFoSXzYdY+fzen4r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 028adb50e50e5a2284c262c762559da6_JaffaCakes118
Files
-
028adb50e50e5a2284c262c762559da6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 247KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 87KB - Virtual size: 484KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE