Static task
static1
Behavioral task
behavioral1
Sample
28f9202fb8d0d8be4274561e5d444aff_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
28f9202fb8d0d8be4274561e5d444aff_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28f9202fb8d0d8be4274561e5d444aff_JaffaCakes118
-
Size
66KB
-
MD5
28f9202fb8d0d8be4274561e5d444aff
-
SHA1
d96ffdfbe58031bf5d27ed8e8db9c89c3ee1494a
-
SHA256
658f278c0e8ad72b97dca47c9319b22b7fc0af6f8da336465f068b0265c52e88
-
SHA512
1b0b3f3efca6b61f3bffd3fd5cbc613f3fcc781c9eb79b193822f083e0dfcb083af10d88cfb4f5cfb8d903acf519e22daf870be15f95f8d24fae52abb1066d94
-
SSDEEP
1536:1yvKohQ9gDugIfxDoP+TizYP3lpuc1VTn5dDMi3tJk0xghWYmNje3Y1z:MvK6ThIfxM+as/h/r5xMv6ghWYmNj3z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28f9202fb8d0d8be4274561e5d444aff_JaffaCakes118
Files
-
28f9202fb8d0d8be4274561e5d444aff_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
cffl Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ