Static task
static1
Behavioral task
behavioral1
Sample
418b6a6e9b3e6956627deda4d3bca35a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
418b6a6e9b3e6956627deda4d3bca35a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
418b6a6e9b3e6956627deda4d3bca35a_JaffaCakes118
-
Size
2KB
-
MD5
418b6a6e9b3e6956627deda4d3bca35a
-
SHA1
db654895bc906d0383c73d1dc462c31059996635
-
SHA256
733b7ef1a97e9e243838237b92bd8b6a6fce1d6038266f4eda115f3853b083b4
-
SHA512
53f0776665ba3e1dfee9686044cadfa55d838a516bc5f75c3e7ed8a117838fe54a3fcb7a3e21f3141aa8b94c429b881605e5e583151ecf1341e666e4cad21a06
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 418b6a6e9b3e6956627deda4d3bca35a_JaffaCakes118
Files
-
418b6a6e9b3e6956627deda4d3bca35a_JaffaCakes118.exe windows:4 windows x86 arch:x86
3746289c4eaccde50b67772f5be2fb9e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetModuleFileNameA
GetModuleHandleA
QueueUserAPC
SleepEx
TerminateProcess
CreateThread
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 242B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ