Static task
static1
Behavioral task
behavioral1
Sample
28f454f13db5cceaacb3e74b15452ff6_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
28f454f13db5cceaacb3e74b15452ff6_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28f454f13db5cceaacb3e74b15452ff6_JaffaCakes118
-
Size
2.9MB
-
MD5
28f454f13db5cceaacb3e74b15452ff6
-
SHA1
55c743a0dab03fea7be1e6516beac751d2641e7b
-
SHA256
746ed007aa6b4e3faaff9274ed4134def679ec58678fec735f2a3c6b8e9acf4b
-
SHA512
5b935d79167ead3c5daad86af2d9b7664dac03c20c38a74c038783aaec946f1b770760a0eba05de30e621291667acf1295ba7cbadc3911ae50c1dae96ee07f7d
-
SSDEEP
49152:ySYLM37s83MFc3yHc7ZU0mItuPmnzoeKva5Q3AqPC6DuOjIYCY5IKR/ACswYGJ:ySuAB3MFcC89TEszmg8AqPCrOUbY5xVl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28f454f13db5cceaacb3e74b15452ff6_JaffaCakes118
Files
-
28f454f13db5cceaacb3e74b15452ff6_JaffaCakes118.exe windows:4 windows x86 arch:x86
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
Sections
CODE Size: 2.8MB - Virtual size: 10.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE