Static task
static1
Behavioral task
behavioral1
Sample
ebaf318d22cfcc108fbb7c003bab4a00_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ebaf318d22cfcc108fbb7c003bab4a00_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ebaf318d22cfcc108fbb7c003bab4a00_JaffaCakes118
-
Size
784B
-
MD5
ebaf318d22cfcc108fbb7c003bab4a00
-
SHA1
eca7ad93fb4b61a342c644a9216638150c929999
-
SHA256
501f359d89588c01879e120b709b42ac8afef9862484ab812480e23de93970a5
-
SHA512
3b28ecc4e75023b54e33390a5b0754742642604b08864d4ab41f13bb9081ba79c3443cedc293c25f282abb7c6ff9774073f0a19609493d515361bff4d4ea3d7f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebaf318d22cfcc108fbb7c003bab4a00_JaffaCakes118
Files
-
ebaf318d22cfcc108fbb7c003bab4a00_JaffaCakes118.exe windows:5 windows x86 arch:x86
23e3116edcde8f190769a3e5604a229e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
ZwTestAlert
ZwCreateFile
kernel32
ExitProcess
Sections
.text Size: 288B - Virtual size: 284B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ