Static task
static1
Behavioral task
behavioral1
Sample
28e250c29de2ad3cc9bcb9378e6866a6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
28e250c29de2ad3cc9bcb9378e6866a6_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
28e250c29de2ad3cc9bcb9378e6866a6_JaffaCakes118
-
Size
23KB
-
MD5
28e250c29de2ad3cc9bcb9378e6866a6
-
SHA1
be66673de4f958f92462935fb232730ca5e82eac
-
SHA256
a3d6365143ac56b58c461a34650a04507c614c543d57008cae746dc08f62adc2
-
SHA512
adc51111e96c32f37215d6a019deae99d6903270b8b09cbf99766063a62f85b7601c62f2ef606d5bc249c96a50ff3bba11a83f57b1d664aed2fbf509244d019c
-
SSDEEP
384:1cFc4x+ktTKI/E/Sk6c+chWBq/bPzEcyZKew7QnMf4SVhgudkZ5YJ6f3:+c0TWSK+I0qrDW67qGKuagJ6f3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28e250c29de2ad3cc9bcb9378e6866a6_JaffaCakes118
Files
-
28e250c29de2ad3cc9bcb9378e6866a6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 136KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 492B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ