Static task
static1
Behavioral task
behavioral1
Sample
28cd6492da5d7e3fa8e957939f312dc5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
28cd6492da5d7e3fa8e957939f312dc5_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28cd6492da5d7e3fa8e957939f312dc5_JaffaCakes118
-
Size
124KB
-
MD5
28cd6492da5d7e3fa8e957939f312dc5
-
SHA1
e5de869b2501b4a2bab4aeb5a63c365518e60d03
-
SHA256
c1a93d8ec653aa6365e3dea1bb089479d09ea96b580eb68e3a5c37b8b9958368
-
SHA512
e57274f99539d0022b6fc9c8e887ac9a1830640aeb20803bb7ed9f96522b62c2b4abd98568253726725ac64b26d3eb6b69a9ed7dd6d077d2a7aa565ea89aa3b6
-
SSDEEP
3072:trlLSi/8/cH/RxBi7wqjStezaYmeunBhzhix8Z:lH/7d8SoYBhwaZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28cd6492da5d7e3fa8e957939f312dc5_JaffaCakes118
Files
-
28cd6492da5d7e3fa8e957939f312dc5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE