Static task
static1
Behavioral task
behavioral1
Sample
28a5a430ca0f228ea70f82f78b24aaf1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
28a5a430ca0f228ea70f82f78b24aaf1_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28a5a430ca0f228ea70f82f78b24aaf1_JaffaCakes118
-
Size
105KB
-
MD5
28a5a430ca0f228ea70f82f78b24aaf1
-
SHA1
403922ff36f0f628934458f41dda9670816861c0
-
SHA256
3d7bfad3c7f08a28b2388fe0b7720abfa42f66b9243bfe0b716afb628759ca16
-
SHA512
1555445abc18aa9ff596c5c8555a04522f919f7c70f1e4b7343ca12275c1bfbeadeba573bd734d6b37e7c555d4e258e1af085d078e91270b6e49b5fde795ed77
-
SSDEEP
1536:mMgFRNvmDYQUDNHQ58MSzt0ZLSH5LPow4UwvIZmVV88oy6/uXYA/m7Tv5PvU3Aey:mMgpvmcQQN48XyLMB34UVADeJV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28a5a430ca0f228ea70f82f78b24aaf1_JaffaCakes118
Files
-
28a5a430ca0f228ea70f82f78b24aaf1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
R0 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE