Static task
static1
Behavioral task
behavioral1
Sample
28dfb9d795155a7b1bc89569ee7fe77f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
28dfb9d795155a7b1bc89569ee7fe77f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
28dfb9d795155a7b1bc89569ee7fe77f_JaffaCakes118
-
Size
12KB
-
MD5
28dfb9d795155a7b1bc89569ee7fe77f
-
SHA1
e453c41b42f403c33f87506e05fdd5c8876c1506
-
SHA256
ad1495554c249e2f64678aaf6502b359f961ac2da0c9b0be64f1fa0149d3e647
-
SHA512
174f533bbb8ea473fd8aaaa70dae846a58e8a9d4a8aa292d76f2bb4fc8abefc79ca6d346b165eaf764db4cdbb9225ad746419103b75852ae282f09c3337fa2e6
-
SSDEEP
192:/RiLJxT3W8SZLOz8LY9kkHFXF1GJlSV1FG6yVJl8Ci+7v0fp12AfqBZYpdVfZiKN:/yJBG8SZg8QNVvGSY6IlW+g8AfvpfRUS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28dfb9d795155a7b1bc89569ee7fe77f_JaffaCakes118
Files
-
28dfb9d795155a7b1bc89569ee7fe77f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.snon Size: 37KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.alqt Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zorml Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ