Static task
static1
Behavioral task
behavioral1
Sample
28131aa9e2b32b12eaa252a40aac2419_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
28131aa9e2b32b12eaa252a40aac2419_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28131aa9e2b32b12eaa252a40aac2419_JaffaCakes118
-
Size
294KB
-
MD5
28131aa9e2b32b12eaa252a40aac2419
-
SHA1
d8f56ceee350ccd10d0fa3019cbf6786e4452f29
-
SHA256
d4bcef1b841c2688c1813905a0304e3968576e6c8e04344490ab0fd3da39cac7
-
SHA512
7e79168ea43f125d7221755245db8368151f5d15ba10bdf366ce2eff9aa7aa107c78e0a72e698e3c5aef2d88e7c06d8669cb8adfa0762987f33c024d45b71a91
-
SSDEEP
6144:Fb8ccpY8RFyXx/YvrfWTFtnH+TThy9spjH8pGRe56gedogU:yNpYggx/YvrOTEY9rpGRM7v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28131aa9e2b32b12eaa252a40aac2419_JaffaCakes118
Files
-
28131aa9e2b32b12eaa252a40aac2419_JaffaCakes118.exe windows:5 windows x86 arch:x86
97bed9ef4f9823b5668276ae443efdd2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
advapi32
RegQueryValueExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ