Static task
static1
Behavioral task
behavioral1
Sample
d28e28bfba57edd2a1e3cee1b1e29409_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d28e28bfba57edd2a1e3cee1b1e29409_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d28e28bfba57edd2a1e3cee1b1e29409_JaffaCakes118
-
Size
19KB
-
MD5
d28e28bfba57edd2a1e3cee1b1e29409
-
SHA1
e6b582f4b1ddac6fbe4625d20de222ca960655b3
-
SHA256
e1408a8081ef3d793a836333bf6e2799b15a0e3a80e8b584cfbec98c08e226fe
-
SHA512
1cfcc6ab0b719e9367d41cf518ece89936a82de8a289c96f10642db079861d1eccbe99a3a5a46c373ead0dda5f0c7ee2bf34db295a03f188849e9da6b54097ae
-
SSDEEP
384:LmvZ/WZ7OLon28o0shr0CQTHI+JMppN/R8Akude2zf3aNJawcudoD7UIw:Lg/WZ7O6No0shr3QTI+27NRl3TWnbcuO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d28e28bfba57edd2a1e3cee1b1e29409_JaffaCakes118
Files
-
d28e28bfba57edd2a1e3cee1b1e29409_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE