Static task
static1
Behavioral task
behavioral1
Sample
28a5e0df0c9109be6d17d01574e0273d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
28a5e0df0c9109be6d17d01574e0273d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28a5e0df0c9109be6d17d01574e0273d_JaffaCakes118
-
Size
5KB
-
MD5
28a5e0df0c9109be6d17d01574e0273d
-
SHA1
0cf190294c407e930166c063475abae3fe124943
-
SHA256
449c6cd2f5ccd7793ff0473b92d62fa6da2f114acd798033a3504354be10f17c
-
SHA512
10c46b9b4a5f4afeda99fec4148ff92caef5799b15090c2ef5c868ca07d9151a61c9fc9b42ea963b3aed056772a193aab59af8c1866772d2500afaa31f6c87bc
-
SSDEEP
96:7Hs9buZLP0MfQFJEqgyEqWUA51bxP36aam2WAabmJLY8zI90P:jCKZTN0EJJ5xP3pm8KFYEI9E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28a5e0df0c9109be6d17d01574e0273d_JaffaCakes118
Files
-
28a5e0df0c9109be6d17d01574e0273d_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 4KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE