Static task
static1
Behavioral task
behavioral1
Sample
28836ec734539d935dff67c223601f17_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
28836ec734539d935dff67c223601f17_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28836ec734539d935dff67c223601f17_JaffaCakes118
-
Size
1.5MB
-
MD5
28836ec734539d935dff67c223601f17
-
SHA1
66bc77e49c52c59d5a619bf6b8f639fd9392a852
-
SHA256
c67ae7e60b552f3408ed938a905dcad713f2743cc1d3bc9924c449f9cfbd9276
-
SHA512
49f90ec6a61220b436ef111c9f7bf6473c426db9216639487bb668e066b28925a14b7c45ecc1e12bca35a0c4790f43acee7856741e3265af7fa6719dd354cc41
-
SSDEEP
24576:OlMR3PuDx7DlpfSFdt1yrIvKgi7tH0cPWLRwI5Nvs+YPYNlpjpVF6GX3hH+vumha:OIWB3SyMjcyNkYNPp769G6+B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28836ec734539d935dff67c223601f17_JaffaCakes118
Files
-
28836ec734539d935dff67c223601f17_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.textbss Size: - Virtual size: 917KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 695KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 789B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ