Static task
static1
Behavioral task
behavioral1
Sample
28d5e2c7748ce204cb529e992c02a8e3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
28d5e2c7748ce204cb529e992c02a8e3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
28d5e2c7748ce204cb529e992c02a8e3_JaffaCakes118
-
Size
367KB
-
MD5
28d5e2c7748ce204cb529e992c02a8e3
-
SHA1
f97412d7de349da0c92bdda3fe2827186f043253
-
SHA256
0361e27bb886d621c5ebf7979589308ef2e77b14d048ad8acbd103c6032e2d36
-
SHA512
bee55c887633e91d7614a86b2a797431d17d9f46b1613371c6ea2daa2e04f4d177998fbefe76dd3b15341d044d015a74c2dc6090e7d0bd5b3022c37256c630c3
-
SSDEEP
6144:zyVRpAY68r3c/uytQU2yJ/kA1J/0XejzmHWX+XDK7kAIzOQn8C86VXje5chvcHE8:zcRpA38CFJjzxJ7kI4OQu2Rmp6q7IMUo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28d5e2c7748ce204cb529e992c02a8e3_JaffaCakes118
Files
-
28d5e2c7748ce204cb529e992c02a8e3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 303KB - Virtual size: 303KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ