Static task
static1
Behavioral task
behavioral1
Sample
b8902907cf4a347b4afacd6a5dfefcda_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b8902907cf4a347b4afacd6a5dfefcda_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b8902907cf4a347b4afacd6a5dfefcda_JaffaCakes118
-
Size
4KB
-
MD5
b8902907cf4a347b4afacd6a5dfefcda
-
SHA1
7924925332ecdcb22c06fb2a9b14b77dabafc6f1
-
SHA256
a9a16a8963130583430697ad6f4d21a233749924918e1fbe03f1d36a21a1406f
-
SHA512
d7d6628ca0b2b7406b303f27281a4b83f28b129a15ef04517ac980bf0fc7509f0849e549a437195fe06ff98bd03d00447dd40fe81102189f605be1f520d54794
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8902907cf4a347b4afacd6a5dfefcda_JaffaCakes118
Files
-
b8902907cf4a347b4afacd6a5dfefcda_JaffaCakes118.exe windows:4 windows x86 arch:x86
eaab53a00203bbad952fe5b2563f101b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetModuleHandleA
GetProcAddress
GlobalGetAtomNameA
ExitProcess
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ