Static task
static1
Behavioral task
behavioral1
Sample
28e3627917e2975bc4db7228ab7d8986_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
28e3627917e2975bc4db7228ab7d8986_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
28e3627917e2975bc4db7228ab7d8986_JaffaCakes118
-
Size
89KB
-
MD5
28e3627917e2975bc4db7228ab7d8986
-
SHA1
46af6eadaf9aa7ae60038db47efc2a327ffb6821
-
SHA256
7cd650fb42bf06c21a39ded13a8c53416284c0173a11ad6a22acb4593bc34cb4
-
SHA512
1ce88a81bee21b01a9603778c4041c54fb09896898db99930e4cddebf63e4eaf9e7443e41aedd67a1d040d0823cec524cfe1aeadd9483a197cd362c9d30de509
-
SSDEEP
1536:+0fJL4FeyGsnZAwP6wnatiKTr3WHw7xYQQ28eIqjCQep+:+0f+BGsnT6bUKTaHw7cV2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28e3627917e2975bc4db7228ab7d8986_JaffaCakes118
Files
-
28e3627917e2975bc4db7228ab7d8986_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 128KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ