Static task
static1
Behavioral task
behavioral1
Sample
0879425e2bda97173dbb15ec27a7bf54_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0879425e2bda97173dbb15ec27a7bf54_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0879425e2bda97173dbb15ec27a7bf54_JaffaCakes118
-
Size
784B
-
MD5
0879425e2bda97173dbb15ec27a7bf54
-
SHA1
085731d9abb3a4da4d936bf6e9c06e37ce640eb8
-
SHA256
969640717d26342d20cf069df02c171a99eca0c2ade08bd4f3a142e6e2f838cb
-
SHA512
ed8d50fb7857800ba7db0d968cfd76b05ac009a20eec5aead4d43ae7e6a5c406aee9277606bf94b6c19906913687b156bc80275004470513c1cad5ed0542a890
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0879425e2bda97173dbb15ec27a7bf54_JaffaCakes118
Files
-
0879425e2bda97173dbb15ec27a7bf54_JaffaCakes118.exe windows:5 windows x86 arch:x86
23e3116edcde8f190769a3e5604a229e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
ZwTestAlert
ZwCreateFile
kernel32
ExitProcess
Sections
.text Size: 288B - Virtual size: 284B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ