Static task
static1
Behavioral task
behavioral1
Sample
28f6dbcfd8ef60025965e3d492b82ebb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
28f6dbcfd8ef60025965e3d492b82ebb_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
28f6dbcfd8ef60025965e3d492b82ebb_JaffaCakes118
-
Size
19KB
-
MD5
28f6dbcfd8ef60025965e3d492b82ebb
-
SHA1
088f3dd5374f351ed982ecd383e73c392de44a28
-
SHA256
e5e940f045f645b17947ae076086c63b6e03d81ba4d10ca3e7ea7ed7a28ae2b8
-
SHA512
50aa922cd6129b7bc60a1748034f98604659cb1742ae72bfb4d81f49bb1a0fe93e1fafd7617f1738d52e309aa9a15d6de5fed5fc458b79acb4e7dc5dde8168c1
-
SSDEEP
192:T75BrZsCp0SbeaQZJTdfMKk1XBD417cn0YK+tdWf3ImeXYMb5FQa13vIP7ZB3le5:T75vX6NXS1XO7PM8ImuzQ7pn4w9RyCI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28f6dbcfd8ef60025965e3d492b82ebb_JaffaCakes118
Files
-
28f6dbcfd8ef60025965e3d492b82ebb_JaffaCakes118.exe windows:4 windows x86 arch:x86
65926fcff16167c3612e389803396ed3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
FindWindowA
Sections
.text Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 146B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE