Static task
static1
Behavioral task
behavioral1
Sample
1a6863b3795ab57cd8adc06b42b916bf_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1a6863b3795ab57cd8adc06b42b916bf_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1a6863b3795ab57cd8adc06b42b916bf_JaffaCakes118
-
Size
2KB
-
MD5
1a6863b3795ab57cd8adc06b42b916bf
-
SHA1
48355826482faaf52a01664824ea480bde598e85
-
SHA256
94f0b8ff78fb94a0e0dbc1a8f377d1dff7f1be1695f88e9d23a1a31cd12b9e3d
-
SHA512
24082fe8f7cedfb57dcf71079e3456c9388c8021bae57626959657edb677e327679d5bfbc33ce721c953d06c7588ab30897a152987b8a61a87a742af410fe7d4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a6863b3795ab57cd8adc06b42b916bf_JaffaCakes118
Files
-
1a6863b3795ab57cd8adc06b42b916bf_JaffaCakes118.exe windows:1 windows x86 arch:x86
16c7c4ad5a738de029cc64b6e88801ee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
WriteFile
ExitProcess
Sections
CODE Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE