Static task
static1
Behavioral task
behavioral1
Sample
aa5c22fea09f8a5d5671878c7724f480_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
aa5c22fea09f8a5d5671878c7724f480_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa5c22fea09f8a5d5671878c7724f480_JaffaCakes118
-
Size
1KB
-
MD5
aa5c22fea09f8a5d5671878c7724f480
-
SHA1
a7d03ec8bca4d4f0386b64e86d77727416c34cbd
-
SHA256
7b4315c7cbf6c311c33c816a14f6ceb753db981506c97f45d4b2d180c8c3fcd7
-
SHA512
b0491d28f4c12c32112ca5e0a3e162d8d2eb49e9c03d86c31e59c270c49a41f3d085b75f2cb0b5943a83c3e07539af656a440e96bd72b78f50d8fde7c93e7c90
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa5c22fea09f8a5d5671878c7724f480_JaffaCakes118
Files
-
aa5c22fea09f8a5d5671878c7724f480_JaffaCakes118.exe windows:4 windows x86 arch:x86
f1a9e4af307b5c4d1d78a641472b15f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetTempPathA
GlobalAlloc
WinExec
urlmon
URLDownloadToFileA
shell32
FreeIconList
Sections
.text Size: 524B - Virtual size: 522B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 284B - Virtual size: 282B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ