Static task
static1
Behavioral task
behavioral1
Sample
0487f3ffbdcbe35f2ab1aac7dd288724_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0487f3ffbdcbe35f2ab1aac7dd288724_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0487f3ffbdcbe35f2ab1aac7dd288724_JaffaCakes118
-
Size
784B
-
MD5
0487f3ffbdcbe35f2ab1aac7dd288724
-
SHA1
7e0872cc3c9470fb683499c171a2929b74da777a
-
SHA256
728aceae44329d64920f3ac2f5cb9710f5453190419e176f39e14b85b5f89cdc
-
SHA512
46d14401701551dc25cab0cbb6ffdf609bb2fa933fc89528c74bd4c72b610798e334053b5d353f70877b06b85fc1bf16ad8281b0287e44b5e3887fa75ef27b8f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0487f3ffbdcbe35f2ab1aac7dd288724_JaffaCakes118
Files
-
0487f3ffbdcbe35f2ab1aac7dd288724_JaffaCakes118.exe windows:5 windows x86 arch:x86
23e3116edcde8f190769a3e5604a229e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
ZwTestAlert
ZwCreateFile
kernel32
ExitProcess
Sections
.text Size: 288B - Virtual size: 284B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ