Static task
static1
Behavioral task
behavioral1
Sample
28a91905b35b8c9959bd6aea7558aef6_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
28a91905b35b8c9959bd6aea7558aef6_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28a91905b35b8c9959bd6aea7558aef6_JaffaCakes118
-
Size
32KB
-
MD5
28a91905b35b8c9959bd6aea7558aef6
-
SHA1
5dbaa41da04215def2c86aeea8266f475f01e1cf
-
SHA256
11546ad75f47629890911e788591a15075fc87b909c8e3bc1b84d1eb6f0b1971
-
SHA512
7ae0c7e1a2db1a8bbdccfa921a2a7dd73c4c9a4a3a4010a4a613d8ff96ce8f95384ad7ccb57fff3baf706c66f16ea3f301bb229106e60c79a83f730fac09712b
-
SSDEEP
384:8cMBIxnjuMEeKurD928XI1lwTT2uAmpWndtxGAHi:8cpuMEeKK52kIyTTWUWn3xGn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28a91905b35b8c9959bd6aea7558aef6_JaffaCakes118
Files
-
28a91905b35b8c9959bd6aea7558aef6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Pav Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 805B - Virtual size: 805B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE