Static task
static1
Behavioral task
behavioral1
Sample
82044ea04b16c8e97423c3bc8e1b6be3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
82044ea04b16c8e97423c3bc8e1b6be3_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
82044ea04b16c8e97423c3bc8e1b6be3_JaffaCakes118
-
Size
2KB
-
MD5
82044ea04b16c8e97423c3bc8e1b6be3
-
SHA1
19539bbbc79283c053056a421685098085f285c7
-
SHA256
46e587a55933543f2a3e1bc18830792bb0244a7ce98001a9619dbda31926e648
-
SHA512
56c035a99453f1650be53c76b1124462bd540dad77cd373ee6c6a0fb849fe94c04fadd5c1efc3438a93b38d036147756e91464bacd22abcf90f084dd78cbce33
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82044ea04b16c8e97423c3bc8e1b6be3_JaffaCakes118
Files
-
82044ea04b16c8e97423c3bc8e1b6be3_JaffaCakes118.exe windows:4 windows x86 arch:x86
ed752be7b437aead73b91250ffe08feb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
GetTickCount
LoadLibraryA
ExitProcess
user32
wsprintfA
Sections
.text Size: 512B - Virtual size: 254B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 246B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE