Static task
static1
Behavioral task
behavioral1
Sample
256839bfa90d2a95c1c7ae7bd3d876c3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
256839bfa90d2a95c1c7ae7bd3d876c3_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
256839bfa90d2a95c1c7ae7bd3d876c3_JaffaCakes118
-
Size
3KB
-
MD5
256839bfa90d2a95c1c7ae7bd3d876c3
-
SHA1
75d6db2f65c0989152944f437ab3c9c3ed2fa785
-
SHA256
314ab4c4d39d87d080092e6b2981a517cc93d3ffdc7397de44f060bbb63fdce5
-
SHA512
d5187661b9866dedf42cc4075667b09c7586c56a06c2578f66775cb6786ad1b61440064f772ba633885f0addf53aaa30f010c2d7c7099d794b6114b3bac62afe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 256839bfa90d2a95c1c7ae7bd3d876c3_JaffaCakes118
Files
-
256839bfa90d2a95c1c7ae7bd3d876c3_JaffaCakes118.exe windows:4 windows x86 arch:x86
3746289c4eaccde50b67772f5be2fb9e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetModuleFileNameA
GetModuleHandleA
QueueUserAPC
SleepEx
TerminateProcess
CreateThread
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 242B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ