Static task
static1
Behavioral task
behavioral1
Sample
b28a1bf285dfad9f5cdb9808fbad087b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b28a1bf285dfad9f5cdb9808fbad087b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b28a1bf285dfad9f5cdb9808fbad087b_JaffaCakes118
-
Size
119KB
-
MD5
b28a1bf285dfad9f5cdb9808fbad087b
-
SHA1
ccd2d6cf87f64b8e4f6c2415b105dbece43d5012
-
SHA256
59a04f3c6006f547538c9b5b72b1fc26bac5cc13a2ab55d4ac1d0ea2656e7149
-
SHA512
7654ebf9ecec8f4a17ea06818e43ff3e502b8c5bd7a003a217c3bc8fedcf218cd5999eeae001ad68f81211d5a251709d3377d537392287fd8ecbdf3b96dd1d28
-
SSDEEP
1536:xgavHcO57DxPu011FQTUk8oXAaDB4eo+RFHmEe/RgU3:3vvHP1WGmD1z3u/qg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b28a1bf285dfad9f5cdb9808fbad087b_JaffaCakes118
Files
-
b28a1bf285dfad9f5cdb9808fbad087b_JaffaCakes118.exe windows:4 windows x86 arch:x86
b5c0892fa36495b498d09f7c10228f02
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
Sections
@(^|^)@ Size: 1024B - Virtual size: 530B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
@(^|^)@ Size: 118KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ