Static task
static1
Behavioral task
behavioral1
Sample
232886f68dd4689d21960cc328a0d5fc_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
232886f68dd4689d21960cc328a0d5fc_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
232886f68dd4689d21960cc328a0d5fc_JaffaCakes118
-
Size
784B
-
MD5
232886f68dd4689d21960cc328a0d5fc
-
SHA1
dfa9ab72faea6330ad09858013d3a9b697f2067f
-
SHA256
8d9a0b74a3026d5f15403578d147fbdf49807db98a29ea62961fe8583a290e15
-
SHA512
64c813fc23c23c6f3a85359968ce8f9eb9e8a40253e65f02ec31310ff6d2ec91c8955cf57b1c3d12920846a9e7869eed934ec5891e71e55e2d533953769f6e02
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 232886f68dd4689d21960cc328a0d5fc_JaffaCakes118
Files
-
232886f68dd4689d21960cc328a0d5fc_JaffaCakes118.exe windows:5 windows x86 arch:x86
23e3116edcde8f190769a3e5604a229e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
ZwTestAlert
ZwCreateFile
kernel32
ExitProcess
Sections
.text Size: 288B - Virtual size: 284B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ