Static task
static1
Behavioral task
behavioral1
Sample
ac11f95062b3a0de91389a48a76449ee_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ac11f95062b3a0de91389a48a76449ee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ac11f95062b3a0de91389a48a76449ee_JaffaCakes118
-
Size
2KB
-
MD5
ac11f95062b3a0de91389a48a76449ee
-
SHA1
dbdef49e3867ed9b64284aad1676bda63fac7aeb
-
SHA256
4083db038b3c420be149649d224f31013f1afe2bc568265b6065dea9c81fcc14
-
SHA512
9a4e93cc91e3abbeb1238ecf2fa23ecd038cf14041146bc1ce3364c6b3f5c63a7565e21b86a357575fd6f3133811f54fc435d1e5e00590abcdef1dd51cbaecb4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac11f95062b3a0de91389a48a76449ee_JaffaCakes118
Files
-
ac11f95062b3a0de91389a48a76449ee_JaffaCakes118.exe windows:1 windows x86 arch:x86
f31e31f86c71da77f2b8292432a8a21f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
urlmon
URLDownloadToFileA
shell32
ShellExecuteA
Sections
.start Size: 7B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rixt Size: 25B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fata Size: 35B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mode Size: 54B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bypass Size: 227B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ