Static task
static1
Behavioral task
behavioral1
Sample
157b638f089883ce6552c46cc8b0de39_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
157b638f089883ce6552c46cc8b0de39_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
157b638f089883ce6552c46cc8b0de39_JaffaCakes118
-
Size
784B
-
MD5
157b638f089883ce6552c46cc8b0de39
-
SHA1
2428c562743bbeb4b8d6d591559979c662d43e04
-
SHA256
e5a86c6383fcd88a098a446f2963b6d858ef70180a40e416a84f9bb898e372c6
-
SHA512
0498d89a05e93c9bc7edabc603c564d56c3502b3f6ee11afe67677622b53aca7545fb9ea5c3304c8f00cd019436ace6103e23bca5b729fd59ccfa8d59159f811
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 157b638f089883ce6552c46cc8b0de39_JaffaCakes118
Files
-
157b638f089883ce6552c46cc8b0de39_JaffaCakes118.exe windows:5 windows x86 arch:x86
23e3116edcde8f190769a3e5604a229e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
ZwTestAlert
ZwCreateFile
kernel32
ExitProcess
Sections
.text Size: 288B - Virtual size: 284B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ