Static task
static1
Behavioral task
behavioral1
Sample
ebb9f9208996cbcac96b295da8562684_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ebb9f9208996cbcac96b295da8562684_JaffaCakes118.exe
Resource
win10v2004-20240319-en
General
-
Target
ebb9f9208996cbcac96b295da8562684_JaffaCakes118
-
Size
24KB
-
MD5
ebb9f9208996cbcac96b295da8562684
-
SHA1
70446fd079fed45f25e39837919cda98491cac26
-
SHA256
1243d73880c60dc3deb42a95b0fd0611abfbf2ae08df2350e7a8ac765bf97b38
-
SHA512
ace0ff77f15e283565a7cb07a0cd7f217d8e995276036cd0474f832698e6464d84c21edc88dbb0b53239f3dddf686a79e00ada657855082cdc23a91bd03ed243
-
SSDEEP
768:PBHbPK/c7R9+AzyNfzZpfA4Wm+vVF80UZJfkSb2:PB7K/YRn+vfsVF80isSb2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebb9f9208996cbcac96b295da8562684_JaffaCakes118
Files
-
ebb9f9208996cbcac96b295da8562684_JaffaCakes118.exe .js windows:4 windows x86 arch:x86 polyglot
2644eef4a6def60993b11749a2d700fc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadContext
GetProcAddress
SetThreadContext
CreateProcessA
GetCommandLineA
LoadLibraryA
VirtualProtectEx
ResumeThread
gdi32
CreateDCA
Sections
.rdata Size: 512B - Virtual size: 362B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE