Static task
static1
Behavioral task
behavioral1
Sample
084400ba5b478b9002d31cb772aca796_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
084400ba5b478b9002d31cb772aca796_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
084400ba5b478b9002d31cb772aca796_JaffaCakes118
-
Size
736B
-
MD5
084400ba5b478b9002d31cb772aca796
-
SHA1
bd15e766ab29e12a5013c9febbb28144666e04f9
-
SHA256
584ea66d0e3a192d1825600f4cbf2ba3f3204f33db565e58f04245eda851e60f
-
SHA512
01ba219abfb9c251f6131f47b9e4449db5a3b242ab4fa772d2309bd3b13d523093ded2ea177e120b11cb9180923bbff9c057fdb665e65553275a4ec2d6bb64c9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 084400ba5b478b9002d31cb772aca796_JaffaCakes118
Files
-
084400ba5b478b9002d31cb772aca796_JaffaCakes118.exe windows:5 windows x86 arch:x86
fb4403305ecf09f2933a6d5958e77578
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
WriteConsoleW
Sections
.text Size: 176B - Virtual size: 166B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 32B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ