Static task
static1
Behavioral task
behavioral1
Sample
c790ef6421e168fc4bca04930bbbe35b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c790ef6421e168fc4bca04930bbbe35b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c790ef6421e168fc4bca04930bbbe35b_JaffaCakes118
-
Size
3KB
-
MD5
c790ef6421e168fc4bca04930bbbe35b
-
SHA1
7dfad9ca40999ae0178c5ce6123f06953425c9b7
-
SHA256
8adf85b1f5850c90e2967712fad8506d9cbcde753e1a9574237f56390a6f2ba6
-
SHA512
c632cab6b29cc1fef09dde3290ec2439fecd494f8620b4bb498863b383ee40b9c2d7a354d8e5fd9bf566ffbe727ba19905b8f3d4b29f89a4df0b530ca497db62
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c790ef6421e168fc4bca04930bbbe35b_JaffaCakes118
Files
-
c790ef6421e168fc4bca04930bbbe35b_JaffaCakes118.exe windows:4 windows x86 arch:x86
bbd84524ff001004aab58d4732d7bcd7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetMenu
kernel32
ExitThread
WaitForSingleObject
SleepEx
CreateEventA
CreateThread
ExitProcess
GetLastError
QueueUserAPC
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 330B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ