Static task
static1
Behavioral task
behavioral1
Sample
f35da43f8988dddefaf36a00f1fef6b6_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f35da43f8988dddefaf36a00f1fef6b6_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f35da43f8988dddefaf36a00f1fef6b6_JaffaCakes118
-
Size
2KB
-
MD5
f35da43f8988dddefaf36a00f1fef6b6
-
SHA1
64b52571c2e66e25f004c6e4e5f8af967df1ebe8
-
SHA256
e6fbdd2a32d0ec60c0fd3e95fe620126c0f7a227ba2889d3f9ce5ab0e25129bb
-
SHA512
86bef8a86f740b1d1c43b728d841de72e1b96a49a5d0f03f110d0f7b48502096d9c867cdada95dbf563566c242c96d7822f496e8f851843b0de6c368bb6fb196
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f35da43f8988dddefaf36a00f1fef6b6_JaffaCakes118
Files
-
f35da43f8988dddefaf36a00f1fef6b6_JaffaCakes118.exe windows:4 windows x86 arch:x86
61674c4c6db951761998fd1685e8e334
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
VirtualAlloc
ExitProcess
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 192B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ