Static task
static1
Behavioral task
behavioral1
Sample
0a1b9472992b5353203255086b1c43bb_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0a1b9472992b5353203255086b1c43bb_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0a1b9472992b5353203255086b1c43bb_JaffaCakes118
-
Size
4KB
-
MD5
0a1b9472992b5353203255086b1c43bb
-
SHA1
2f671eb3170e11156ec252902c344ed8b285756b
-
SHA256
8a8929d32dc33a6fca908b7aa3ea9e537bf3a445b07ddccab3a50e429d90cb3a
-
SHA512
c87636c4efded2f9253fcc1b63dbc73ed78a7ebd6a5de26489b3bbf913048c9da4526fbfe4fb14bfb77922bee58b43be054e65bdfaea201b543a97261af25378
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a1b9472992b5353203255086b1c43bb_JaffaCakes118
Files
-
0a1b9472992b5353203255086b1c43bb_JaffaCakes118.exe windows:4 windows x86 arch:x86
7d9771bd6660df939c0a809472756b48
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxW
kernel32
GetProcAddress
ExitProcess
GetAtomNameA
GetLastError
GetModuleHandleA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ