Static task
static1
Behavioral task
behavioral1
Sample
b5298cfbbd5b205baffe644309f401c0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b5298cfbbd5b205baffe644309f401c0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b5298cfbbd5b205baffe644309f401c0_JaffaCakes118
-
Size
784B
-
MD5
b5298cfbbd5b205baffe644309f401c0
-
SHA1
3a00d4c4ff5496baddc39afe5a310fe3ecbe5d4d
-
SHA256
978d4e8f26824e4794457742a4a52e8f8200e14d523dd10fb5c5faace6aaef50
-
SHA512
f588eacaea2e5c2f90b40864628ced4013d22c0f562bcd171c956c135f12b47e7180d3c6db15d768ca61048e48cee5ed4823ab02b5adbf6b012104cdf13dad1b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5298cfbbd5b205baffe644309f401c0_JaffaCakes118
Files
-
b5298cfbbd5b205baffe644309f401c0_JaffaCakes118.exe windows:5 windows x86 arch:x86
23e3116edcde8f190769a3e5604a229e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
ZwTestAlert
ZwCreateFile
kernel32
ExitProcess
Sections
.text Size: 288B - Virtual size: 284B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ