Static task
static1
Behavioral task
behavioral1
Sample
396cf216c67180b9c5a06732b5058072_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
396cf216c67180b9c5a06732b5058072_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
396cf216c67180b9c5a06732b5058072_JaffaCakes118
-
Size
3KB
-
MD5
396cf216c67180b9c5a06732b5058072
-
SHA1
61679dccc80373ab621c1f62c6ed7cf65caf4f15
-
SHA256
263b5d9982eb5e8cbae8b93e44d8e53e39da803a4beb11de4d049b4b9438aabd
-
SHA512
aad3fc610d5b9c9f0cfe6f93a1eabb6ddd4e66d7159b596fa6192b250c5c7ad830f9e9b837219641966a0a0de51b70897e5724b63e5a58bf98bdc4cef00c171a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 396cf216c67180b9c5a06732b5058072_JaffaCakes118
Files
-
396cf216c67180b9c5a06732b5058072_JaffaCakes118.exe windows:4 windows x86 arch:x86
fa0650750b44b9b5878cd7dae0b875c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
wsprintfW
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ