Static task
static1
Behavioral task
behavioral1
Sample
35687f78d407ac737c88fa691c33faed_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
35687f78d407ac737c88fa691c33faed_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35687f78d407ac737c88fa691c33faed_JaffaCakes118
-
Size
2KB
-
MD5
35687f78d407ac737c88fa691c33faed
-
SHA1
1b7080ef83fd1455b6922098ce18bd76fac3ff3f
-
SHA256
cdf7037e91289ee0894ca2f8fe089d70531a4ec98bc65fa875dc8bd8df9045d7
-
SHA512
815a633cb1646a021e65057e25fc6e8abf08c8e249c4f8580b74aecbc7e22f27d07fcbb0fda51d31fd840510d4561e7ea1634f9416c0cbda60d941617d46b1a2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35687f78d407ac737c88fa691c33faed_JaffaCakes118
Files
-
35687f78d407ac737c88fa691c33faed_JaffaCakes118.exe windows:4 windows x86 arch:x86
022477a79e223e3065d7081ac2100145
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetModuleHandleA
GlobalFindAtomA
ExitProcess
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 192B - Virtual size: 162B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ