Static task
static1
Behavioral task
behavioral1
Sample
d601037a4496c164b61c87e5124a3e2c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d601037a4496c164b61c87e5124a3e2c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d601037a4496c164b61c87e5124a3e2c_JaffaCakes118
-
Size
2KB
-
MD5
d601037a4496c164b61c87e5124a3e2c
-
SHA1
0a79a2ee8cf608949cb6eb33e2fb5a4caa42a6cc
-
SHA256
53d77eb5285a7b41933533900fc15b3eb8faedddbdee765ae04f30a0ac3bf3a5
-
SHA512
d3f4ec393e84b82e042372ab168441d30d330f431a4b708eb371793529236dee869fb0cba5beefd386928f5003e84a015ce67f102a27c3a4d48ac993fa95dc52
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d601037a4496c164b61c87e5124a3e2c_JaffaCakes118
Files
-
d601037a4496c164b61c87e5124a3e2c_JaffaCakes118.exe windows:4 windows x86 arch:x86
9847cbf6b10ee76499cda6ac94be76df
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadWritePtr
ExitProcess
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ