Static task
static1
Behavioral task
behavioral1
Sample
28b2f0aef63b02cc87e4a26113923f79_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
28b2f0aef63b02cc87e4a26113923f79_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28b2f0aef63b02cc87e4a26113923f79_JaffaCakes118
-
Size
109KB
-
MD5
28b2f0aef63b02cc87e4a26113923f79
-
SHA1
3fddce657ceeeb50225323a1522c19cc6df5bf96
-
SHA256
3874e5a41ffbb27e0a8f2f76cbf13931cfe90eed0540bddcdff5449c59d9dd76
-
SHA512
d8b4856df5d068c02063d858c22b947e809d9e7b580e78a49d8c65ea710a4ce98c7820ca53e029d1270609405668cf62e589de17a0be6fe14df83137f110b49d
-
SSDEEP
3072:vynAdqNTDH5esWirBjDi0NnDEDCN0IpGvZusfFz4avPJ:XqNTDHM4rE0NbCIUEWzVHJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28b2f0aef63b02cc87e4a26113923f79_JaffaCakes118
Files
-
28b2f0aef63b02cc87e4a26113923f79_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
. Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.s Size: 512B - Virtual size: 171B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ