Static task
static1
Behavioral task
behavioral1
Sample
f0dcfbf51d2b615958669fbe3e1574d9_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f0dcfbf51d2b615958669fbe3e1574d9_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f0dcfbf51d2b615958669fbe3e1574d9_JaffaCakes118
-
Size
1KB
-
MD5
f0dcfbf51d2b615958669fbe3e1574d9
-
SHA1
f64c66dde6ce2cfa7975f15aef76f1e25a6c49f1
-
SHA256
301fd6fb0114bb678c109944f137ddff2e5d8f61983d718e11be476abc729b5b
-
SHA512
d3ac447f24ad3e9defb91a617ff82e6b39f18c900fed94b94a27d69b199c4f8efc74353aba82aafffb96d2cf033210c3a348f97921f903a5b8ba04ac57c4d866
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0dcfbf51d2b615958669fbe3e1574d9_JaffaCakes118
Files
-
f0dcfbf51d2b615958669fbe3e1574d9_JaffaCakes118.exe windows:1 windows x86 arch:x86
5f5a299c3c928757a3784fd4200a8d27
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CreateFileA
WriteFile
SetFilePointer
CloseHandle
lstrlenA
ExitProcess
user32
GetAsyncKeyState
MapVirtualKeyA
GetKeyNameTextA
Sections
.flat Size: 1024B - Virtual size: 772B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE