Static task
static1
Behavioral task
behavioral1
Sample
dfff35d0d1a83daf6c813accb55d490d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dfff35d0d1a83daf6c813accb55d490d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dfff35d0d1a83daf6c813accb55d490d_JaffaCakes118
-
Size
2KB
-
MD5
dfff35d0d1a83daf6c813accb55d490d
-
SHA1
b5d2ca70cd14b7bd3046a3c9144c5b7345887d34
-
SHA256
d21f5f020d4778a8d9cc32bdb38b37bf90220f9e19ddbcfbcc7bce1f8b67533a
-
SHA512
9e4bb347481b3e83faa3c3ee1e2b021310a7981e0500926b5f097ac6284021f15102308a134e8c874d6f0d29874771c4ba77dcc00f765614e5ad028ac602988f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfff35d0d1a83daf6c813accb55d490d_JaffaCakes118
Files
-
dfff35d0d1a83daf6c813accb55d490d_JaffaCakes118.exe windows:4 windows x86 arch:x86
9847cbf6b10ee76499cda6ac94be76df
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadWritePtr
ExitProcess
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ