Static task
static1
Behavioral task
behavioral1
Sample
28e6e73fa89bdc9c6125595056c2aeab_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
28e6e73fa89bdc9c6125595056c2aeab_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
28e6e73fa89bdc9c6125595056c2aeab_JaffaCakes118
-
Size
182KB
-
MD5
28e6e73fa89bdc9c6125595056c2aeab
-
SHA1
8cd2603823c176594d4a73b568fab2477f03d0d1
-
SHA256
73f06a54e4454b56f2635ed50371d5467653cd695a352bbf79d28404a79679e4
-
SHA512
12978c08f03fb9b43ea2db835fed8b7cd91deffb14730d94a84437c8672811083f87f06e3d392c5ec854f64afa752fbb2d99ea743ce34438e8399659b9ee6728
-
SSDEEP
3072:2IEWdcOf/v6yFObb2GDyfxK6uFnHMeIoSLhgUTOurx+U0M4n5HQb6f1tZx:2IFWY/v671CxKjnHmhEM+UL45HQ2/H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28e6e73fa89bdc9c6125595056c2aeab_JaffaCakes118
Files
-
28e6e73fa89bdc9c6125595056c2aeab_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 477KB - Virtual size: 476KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ