Static task
static1
Behavioral task
behavioral1
Sample
28b8e2d4b70b57db027c2f0710ca1971_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
28b8e2d4b70b57db027c2f0710ca1971_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28b8e2d4b70b57db027c2f0710ca1971_JaffaCakes118
-
Size
55KB
-
MD5
28b8e2d4b70b57db027c2f0710ca1971
-
SHA1
a79167db134328b9447af05ac654613fa97fea0f
-
SHA256
3aa8c73abb9240cd9830a43f0718ec0c3aa18b813536a5b32facf5fb7d752a2a
-
SHA512
db6de4a5a6121a397672fabef59e16c6bef06fe39a1c17ff55ed17676a088bf08674cdc2f3fe4cae4c25b2c77a7a3f9613bd387e4d0c8bf2d94fe5904903d817
-
SSDEEP
768:vdmX9Dumocjnr9MSP9LO3IjyImsQM4UrjGpmZztl4wKrFTAkQPbZ/:vOcYrnp8glmsQGOktzKrRMzZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28b8e2d4b70b57db027c2f0710ca1971_JaffaCakes118
Files
-
28b8e2d4b70b57db027c2f0710ca1971_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 55KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE