Static task
static1
Behavioral task
behavioral1
Sample
dbe8d3618c65e1b20fdaf1f38c6f6551_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dbe8d3618c65e1b20fdaf1f38c6f6551_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dbe8d3618c65e1b20fdaf1f38c6f6551_JaffaCakes118
-
Size
784B
-
MD5
dbe8d3618c65e1b20fdaf1f38c6f6551
-
SHA1
3b38d6d829f515812c1347c28cc3850dc9b39288
-
SHA256
2e045d6de97e8a6217526f15f16578b398f7493f0447e3dbe977453cf1963981
-
SHA512
e992c9abc719ec7a2f57dee44a67ffe0bece5e461bfa9f3aa1ecde1bd33cc66bd8007e4c88a5a7d7be5e769450d4890d6e5e68a4bd1b89897ac6f1181ed15d13
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbe8d3618c65e1b20fdaf1f38c6f6551_JaffaCakes118
Files
-
dbe8d3618c65e1b20fdaf1f38c6f6551_JaffaCakes118.exe windows:5 windows x86 arch:x86
23e3116edcde8f190769a3e5604a229e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
ZwTestAlert
ZwCreateFile
kernel32
ExitProcess
Sections
.text Size: 288B - Virtual size: 284B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ