Static task
static1
Behavioral task
behavioral1
Sample
68c4b0758911d990d08e9d54e13cf2ff_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
68c4b0758911d990d08e9d54e13cf2ff_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68c4b0758911d990d08e9d54e13cf2ff_JaffaCakes118
-
Size
784B
-
MD5
68c4b0758911d990d08e9d54e13cf2ff
-
SHA1
f6fc0ca7b909dfb3bebd9024126e033763857518
-
SHA256
107423c53578c293b69d93433a25cb20f104cdedfa9692b24399a3b5c075a6e0
-
SHA512
f62f11069d6c1aca63b9ad0842029d4a79e1a2d6be42ee4bd2f23680f6fa3704d4b6c8eab29fade3863bfbd4ea3816725f07eb9d642ad1b928e43941fc458830
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68c4b0758911d990d08e9d54e13cf2ff_JaffaCakes118
Files
-
68c4b0758911d990d08e9d54e13cf2ff_JaffaCakes118.exe windows:5 windows x86 arch:x86
23e3116edcde8f190769a3e5604a229e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
ZwTestAlert
ZwCreateFile
kernel32
ExitProcess
Sections
.text Size: 288B - Virtual size: 284B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ