Static task
static1
Behavioral task
behavioral1
Sample
28766bd84f9846bcdc8a5b84ca69e72f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
28766bd84f9846bcdc8a5b84ca69e72f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
28766bd84f9846bcdc8a5b84ca69e72f_JaffaCakes118
-
Size
30KB
-
MD5
28766bd84f9846bcdc8a5b84ca69e72f
-
SHA1
a0c59f20435a08e3156eb1e98650ec2c6c505d63
-
SHA256
ab5e8f170f19d45e4a33307bd72e7cb12ae24ef825b9a9ef70eb16d6c987450a
-
SHA512
c35266ecfee2f311562b2a2b029276ccc80c7de0149f2e0c27cd2dfe92646003c3c190b1343d9de25cbf6f2b56126e02e7bf62b352b1ced34c2b9b9d682214ef
-
SSDEEP
768:UZKZd/Ubq3PkzI8vMPozB1ZStUUbeKgmaBlX+cqOc:l9fIS2X0tUM8fX+cqj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28766bd84f9846bcdc8a5b84ca69e72f_JaffaCakes118
Files
-
28766bd84f9846bcdc8a5b84ca69e72f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 63KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ