Static task
static1
Behavioral task
behavioral1
Sample
28ff9fe3f22ea6145384e6238634e3de_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
28ff9fe3f22ea6145384e6238634e3de_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
28ff9fe3f22ea6145384e6238634e3de_JaffaCakes118
-
Size
16KB
-
MD5
28ff9fe3f22ea6145384e6238634e3de
-
SHA1
8515c375afe7f0682e9f2a5453289eb588e8a896
-
SHA256
1b08190f894d2d58b9df32bca88f2a5df45713f702d400b42fb7f1df38c57429
-
SHA512
273cfdc557e0f73a042e000521795f0f0e8ffbd461383f115a80054640599b75a5edc349b8b8ad7684503c521569441873b6338ef2ae8b192e09fb4fbddb7781
-
SSDEEP
192:BOFIcNzH6UMtjUX2hwpnKxRZEoZv3HndJIBDtoH2kenUHMZQEceZWUaD0fVQJBRG:AS2a3tjU2hwp8H5dZCnUUXbZygArFw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28ff9fe3f22ea6145384e6238634e3de_JaffaCakes118
Files
-
28ff9fe3f22ea6145384e6238634e3de_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 11KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE