Static task
static1
Behavioral task
behavioral1
Sample
28cae458c189ec119491d79392af2fc7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
28cae458c189ec119491d79392af2fc7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
28cae458c189ec119491d79392af2fc7_JaffaCakes118
-
Size
80KB
-
MD5
28cae458c189ec119491d79392af2fc7
-
SHA1
b8b612ea4b20c4d69dbd972004fe25924aeb2540
-
SHA256
b4d7c4c0953a783b2cdce3b132385232d328de31abe42fc7f5263bee71f64c56
-
SHA512
1020d3e75bc626aad57581a800164731fcbbbbfbcf37edb8155e8289c967463fbed829b31d3e2f16d458c20122eb459c17e9b9964e071efcbd66ed0cb11afc67
-
SSDEEP
1536:fkbJD4xNFbme3HpHeerzkpMjN5X+/ZzMpUwn:8SNFbH3HMerzkYNV+Wzn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28cae458c189ec119491d79392af2fc7_JaffaCakes118
Files
-
28cae458c189ec119491d79392af2fc7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.peco Size: 762KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.peco Size: 100KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.peco Size: 79KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.peco Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.peco Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE