Static task
static1
Behavioral task
behavioral1
Sample
ce91a8bb70f438a4334725ef799e1798_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce91a8bb70f438a4334725ef799e1798_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce91a8bb70f438a4334725ef799e1798_JaffaCakes118
-
Size
2KB
-
MD5
ce91a8bb70f438a4334725ef799e1798
-
SHA1
58807fffb474524f7239aeba509c22f61bc76d95
-
SHA256
5a9c653e6333ba9a4c09fcb04804430be9d2707f9782a2012bdcb9d989ee6c25
-
SHA512
9814179fed867b1d231c52f9a0af27c38a6033406690b27b1632b72b0b286bb269d36398faaf9d452997883f9047543760fef64d3559e794db7c1ea3f9f24936
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce91a8bb70f438a4334725ef799e1798_JaffaCakes118
Files
-
ce91a8bb70f438a4334725ef799e1798_JaffaCakes118.exe windows:5 windows x86 arch:x86
32398d4ef535166fe3a511a0837e8cb6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetLastError
LoadLibraryA
ExitProcess
user32
wsprintfA
MessageBoxA
Sections
.text Size: 1024B - Virtual size: 540B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE