Static task
static1
Behavioral task
behavioral1
Sample
28f2a6017f240b29a1af447b83ceefd7_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
28f2a6017f240b29a1af447b83ceefd7_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28f2a6017f240b29a1af447b83ceefd7_JaffaCakes118
-
Size
304KB
-
MD5
28f2a6017f240b29a1af447b83ceefd7
-
SHA1
d00051af103034d5fde0419c59befaeea9c7aa30
-
SHA256
ecdce4517a30b89a155bbd9b6cd317322678525ed04fec05c6a4e269f84dd2a6
-
SHA512
bd6f17369b9124daa2b2d730aebf60eebbe7b2f92e9c7b9e179245539b6d81b2c9077bc346b28a3c1a3f7b1d2ad40c8cf82768c0fbf2fb1e8ae7d4d7a0a2e807
-
SSDEEP
3072:P79ayAc1/akBqP0rdnsrXh4ukoVaXZuj66j6BLnKK4xXx4NHj6G:RY4/anPOwhcUapcx8zpehGD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28f2a6017f240b29a1af447b83ceefd7_JaffaCakes118
Files
-
28f2a6017f240b29a1af447b83ceefd7_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 253KB - Virtual size: 253KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 137B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ