Static task
static1
Behavioral task
behavioral1
Sample
18077a1c0413924c78f6f63745a94237_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
18077a1c0413924c78f6f63745a94237_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
18077a1c0413924c78f6f63745a94237_JaffaCakes118
-
Size
708B
-
MD5
18077a1c0413924c78f6f63745a94237
-
SHA1
8b56167c8189859f5847c8fe4afd431998c2871f
-
SHA256
d070add2db0cd51b8a4a0297fba896120cb3962e443d4db4117bd9af2c280572
-
SHA512
faedc47406b27a91df766beada43390126a0a2164afbfed13e6f9839b527e4ca74e2a88d425476b5297965e0e98c85d6dd1da78507bbd7715e76385128a02fb5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18077a1c0413924c78f6f63745a94237_JaffaCakes118
Files
-
18077a1c0413924c78f6f63745a94237_JaffaCakes118.exe windows:4 windows x86 arch:x86
e5e6508a4e456e06e7a7d05052fbf700
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
Sleep
DeleteFileA
Sections
.text Size: 196B - Virtual size: 194B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE