Static task
static1
Behavioral task
behavioral1
Sample
28b8ca6c720f19e0893670ed5e7f8703_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
28b8ca6c720f19e0893670ed5e7f8703_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28b8ca6c720f19e0893670ed5e7f8703_JaffaCakes118
-
Size
353KB
-
MD5
28b8ca6c720f19e0893670ed5e7f8703
-
SHA1
0ab250948ce7374b717d980973d8f88117dd1827
-
SHA256
e3078798dce3016e8b16cbcf04be86980827ff1f724aa1d7a1470a81b4cf16a3
-
SHA512
d84a01ccf7f8a145948abe21cccc4471f5e0fdcf1819c3a73e730c1e045b7132ae842784c1358037a1f1bd75fe0178886f049ae9bebcfff72999bbf78332a5cb
-
SSDEEP
6144:njiZ7kRJ272cYYyDtAb1EUTIIrXBPExO8GRWd66DVrZ7btJgWJoc+M9IvVZ4x/xx:3+2cYY+C175SGRWg6Df7btqWN+zaZHR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28b8ca6c720f19e0893670ed5e7f8703_JaffaCakes118
Files
-
28b8ca6c720f19e0893670ed5e7f8703_JaffaCakes118.exe windows:4 windows x86 arch:x86
aa6bad5b0bfecf9f9c8257e864d67fb7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
Sections
��*����� Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
i�a1��s Size: 336KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���mO Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���}��9 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE