Static task
static1
Behavioral task
behavioral1
Sample
c07b11590b1088ddb292b99822357428_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c07b11590b1088ddb292b99822357428_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c07b11590b1088ddb292b99822357428_JaffaCakes118
-
Size
2KB
-
MD5
c07b11590b1088ddb292b99822357428
-
SHA1
63193ac06df6411fb180cd9587e676f2b59d5e8d
-
SHA256
764b5d174ad8dee50322e6e85b4d309a81be2ef3fea7c9b6eeb58c488bda2495
-
SHA512
b7adc63ca3068ee07f89008399c436384f93ac495ff91fdaffed65985df2e36bb4d3b54d329b0c1d3b0b6c8fbdd3e4195e1617a6a256de0a4a4ada2d47d9ec93
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c07b11590b1088ddb292b99822357428_JaffaCakes118
Files
-
c07b11590b1088ddb292b99822357428_JaffaCakes118.exe windows:4 windows x86 arch:x86
db6c33bf38366f12ae17243e7170bd23
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetLastError
CreateMutexA
ExitProcess
DeleteFileA
WinExec
GetTickCount
GetTempPathA
GetProcAddress
LoadLibraryA
user32
wsprintfA
msvcrt
fopen
exit
fclose
fscanf
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ