Static task
static1
Behavioral task
behavioral1
Sample
bd97b7dfdfc3ea3c6ce5ec1289a4110a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bd97b7dfdfc3ea3c6ce5ec1289a4110a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd97b7dfdfc3ea3c6ce5ec1289a4110a_JaffaCakes118
-
Size
1024B
-
MD5
bd97b7dfdfc3ea3c6ce5ec1289a4110a
-
SHA1
07b2f609ff08923fd5fc466094720abf5ef272a3
-
SHA256
7b3d803fd432035aa8598a06303c1205f1929e97d48353cb8e506b349e30c596
-
SHA512
74633b036e71a847548eb61317d3b18f8c6ee7cfac3bba8f31212a5a7aed254ea80fd013a752b8f3b148d26b678efdd2241a7bab0dfe9dbe8caf1f5177148cc0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd97b7dfdfc3ea3c6ce5ec1289a4110a_JaffaCakes118
Files
-
bd97b7dfdfc3ea3c6ce5ec1289a4110a_JaffaCakes118.exe windows:4 windows x86 arch:x86
dba982c6c87b94ec8a71dc737530f222
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
ExitProcess
msvcrt
memset
urlmon
URLDownloadToFileA
Sections
adr Size: 512B - Virtual size: 450B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE