Static task
static1
Behavioral task
behavioral1
Sample
28ef8e8817fb4aef63b629edf37f8058_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
28ef8e8817fb4aef63b629edf37f8058_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28ef8e8817fb4aef63b629edf37f8058_JaffaCakes118
-
Size
163KB
-
MD5
28ef8e8817fb4aef63b629edf37f8058
-
SHA1
c6ee4816998232fd673b2bf1937d0e16a3dcc315
-
SHA256
b616e961bedad9223d059fb09d40ffe378b39d540fe73ab2a5a9b933274470cf
-
SHA512
be6b53dd41a9db9fd68ee4b8cfa97ca4f3855045693ec84ca27c381f10219a20e9b29f96de8e25d1c38d0d22b8801021f2a8e04d6f8e50774d4d5b3449f5cfb8
-
SSDEEP
3072:Wy277oiiiBB6HMm3nQuTz5U0OfrxtOzx4bzWKeH3tMCmzsaz:Wy27MiiiBB6Hj3Qg112rqzxl/3thEse
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28ef8e8817fb4aef63b629edf37f8058_JaffaCakes118
Files
-
28ef8e8817fb4aef63b629edf37f8058_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 74KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 984KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE