Static task
static1
Behavioral task
behavioral1
Sample
28f93463eca9390c3b519f0431ca0c50_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
28f93463eca9390c3b519f0431ca0c50_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
28f93463eca9390c3b519f0431ca0c50_JaffaCakes118
-
Size
274KB
-
MD5
28f93463eca9390c3b519f0431ca0c50
-
SHA1
4afd7dcad27b7e3e2c7ccbedbb475ed8214a109f
-
SHA256
a2543ade7d65063a0e4680e4637ee5fe96594a1f6ae0dc7110cda78c027a7522
-
SHA512
a84c98ca862ccabf4d52c6ff5edb010a06e3ee5faf688d143afca20464235eb1c2240a49d2ee1090c8024b4048aa5cd85e1db291953a1107e7621d096acafa37
-
SSDEEP
6144:e9K3bsMq6XJaFep68Zvc236EBLlsqxriIFFV:ec3bHJaFq9k23HBLlsqpzFX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28f93463eca9390c3b519f0431ca0c50_JaffaCakes118
Files
-
28f93463eca9390c3b519f0431ca0c50_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 33.0MB - Virtual size: 41.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 558KB - Virtual size: 560KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE