Static task
static1
Behavioral task
behavioral1
Sample
71e23b13b18a2b8b825f1e520480d254_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
71e23b13b18a2b8b825f1e520480d254_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
71e23b13b18a2b8b825f1e520480d254_JaffaCakes118
-
Size
784B
-
MD5
71e23b13b18a2b8b825f1e520480d254
-
SHA1
bb7614c7180a746d0629a03dc786d7ec30941ee3
-
SHA256
9209128814d54ff9adb45b44e9a46b3202157495f8fcf0cfd9967080032a5aeb
-
SHA512
c043769685ddf3edd8aa300bf9fbc467909165117c62325cde89e9ca2d38e61d04abba5384f941c9d99f56bb724f62b65bcf6763e4359bb7caee3e66bf5ac3a4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71e23b13b18a2b8b825f1e520480d254_JaffaCakes118
Files
-
71e23b13b18a2b8b825f1e520480d254_JaffaCakes118.exe windows:5 windows x86 arch:x86
23e3116edcde8f190769a3e5604a229e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
ZwTestAlert
ZwCreateFile
kernel32
ExitProcess
Sections
.text Size: 288B - Virtual size: 284B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ