Static task
static1
Behavioral task
behavioral1
Sample
dafd1845522ba98e555f7802da850066_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dafd1845522ba98e555f7802da850066_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dafd1845522ba98e555f7802da850066_JaffaCakes118
-
Size
2KB
-
MD5
dafd1845522ba98e555f7802da850066
-
SHA1
775d702017873b46bb55ce2050f7d338200c6b75
-
SHA256
ee9f3cb055e3e5afbd3bfc4bbbfb62522e0a209bbcc11ad13538afd152a77421
-
SHA512
3c0251e2c15028e6d974dd61123beef830a4350370d4e130068c09de8aea55a9da204eb06f64bcaead284f4d3a7dc1a24c5e070c9027089b9b4af98e653ab854
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dafd1845522ba98e555f7802da850066_JaffaCakes118
Files
-
dafd1845522ba98e555f7802da850066_JaffaCakes118.exe windows:4 windows x86 arch:x86
77f2371ce8e8da1e2f4734cfcbb1df94
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
urlmon
IsValidURL
Sections
.text Size: 512B - Virtual size: 166B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 196B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE