Static task
static1
Behavioral task
behavioral1
Sample
0cbf9bd35964d3432ed10609d7f41376_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0cbf9bd35964d3432ed10609d7f41376_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0cbf9bd35964d3432ed10609d7f41376_JaffaCakes118
-
Size
1024B
-
MD5
0cbf9bd35964d3432ed10609d7f41376
-
SHA1
4c802f9b6feb03df65774d9e59a1fa7c6bb49cf7
-
SHA256
e3115bed858d4db108381e94c7bb844a369e879200fd0f82852932d5c732277e
-
SHA512
17097a1260c8b517829a3152621d5ebf4712d6ae14b9ea284a7e1fef31e38c39febd976a5ceaf99311d6699e4364bcfa364b8d51c56a7c1f3fbf81ff4bcf87bb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cbf9bd35964d3432ed10609d7f41376_JaffaCakes118
Files
-
0cbf9bd35964d3432ed10609d7f41376_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE