Static task
static1
Behavioral task
behavioral1
Sample
28b22ddc123610c1489ab4a530e88f28_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
28b22ddc123610c1489ab4a530e88f28_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28b22ddc123610c1489ab4a530e88f28_JaffaCakes118
-
Size
76KB
-
MD5
28b22ddc123610c1489ab4a530e88f28
-
SHA1
96f64e8f5fe678d594b11e10e4ee9e45e4fc316f
-
SHA256
2b00ae1a8e1f2084c75854889b9120f6da40d9847aa3a00e6b82af79103db59f
-
SHA512
5c3a4e3d5040bdeefe8d1897732f17910ca7309672412eacccb385f1975f864308e7219350a65bb6ea9e10e997e7d3ced2eb5bedcb977974c9d407cd10dc63e8
-
SSDEEP
1536:S1jxrvhxI7/KY65XR9T+30HGE40HzHZR4cdpR:S1FrvhxIreY30HL40Hv4cdp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28b22ddc123610c1489ab4a530e88f28_JaffaCakes118
Files
-
28b22ddc123610c1489ab4a530e88f28_JaffaCakes118.exe windows:4 windows x86 arch:x86
9ec6a573d2e74bf19d7546b3a6b639cf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitThread
Sections
8��rj�� Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
N� �G� Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ