Static task
static1
Behavioral task
behavioral1
Sample
ad38c17a0f1d613f3509367ea383fceb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ad38c17a0f1d613f3509367ea383fceb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ad38c17a0f1d613f3509367ea383fceb_JaffaCakes118
-
Size
4KB
-
MD5
ad38c17a0f1d613f3509367ea383fceb
-
SHA1
ab83ba81f72e8eeeca3ae75603f4083a8afbf87c
-
SHA256
5a1fa9acd0d4b926a2f0f976652706cd096e9f183249771373bda0dcb04b06dd
-
SHA512
cb09c2536d39175d1994c7ee4afdfbf23e8c09a8dd8e7b0cb9ac112c69137ac98b6b065e83756b82ec1a3b50fd8f00ac7bdc0f287381277c1e2960f38a4c8fa2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad38c17a0f1d613f3509367ea383fceb_JaffaCakes118
Files
-
ad38c17a0f1d613f3509367ea383fceb_JaffaCakes118.exe .vbs windows:1 windows x86 arch:x86 polyglot
7dc2b4206e3e8e7e8ff81497bb7f6acc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CopyFileA
CloseHandle
FreeLibrary
GetModuleFileNameA
CreateFileA
GetWindowsDirectoryA
LoadLibraryA
WinExec
WriteFile
lstrcat
GetProcAddress
user32
MessageBoxA
Sections
CODE Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ