Static task
static1
Behavioral task
behavioral1
Sample
ce4e07af3ba8cfe08518300edef45cfe_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce4e07af3ba8cfe08518300edef45cfe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce4e07af3ba8cfe08518300edef45cfe_JaffaCakes118
-
Size
3KB
-
MD5
ce4e07af3ba8cfe08518300edef45cfe
-
SHA1
d989d97e6b2a753f68e441aed99c6da4f55d9c95
-
SHA256
13f46b09b448fafe2a40505a0a218cda2c8ff6b1a932eef82043077fa68c939d
-
SHA512
4781b1c8d69557d0458e0eb4f56058bbfd41f22cf94c3c3c25f300e505272b24060250456c65fbe4079a027029cb422a2db5397d1be27f3116d3e89764d12fc1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce4e07af3ba8cfe08518300edef45cfe_JaffaCakes118
Files
-
ce4e07af3ba8cfe08518300edef45cfe_JaffaCakes118.exe windows:5 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sections
.text Size: 512B - Virtual size: 14B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE