Static task
static1
Behavioral task
behavioral1
Sample
edb3f639b87893fc9152640afc04e2f8_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
edb3f639b87893fc9152640afc04e2f8_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
edb3f639b87893fc9152640afc04e2f8_JaffaCakes118
-
Size
9KB
-
MD5
edb3f639b87893fc9152640afc04e2f8
-
SHA1
067c7cc1b60e8854308e54ed85e0827063bf18c1
-
SHA256
ceec05900145af2d2e14ebf29338e65634cd0d7c3010ddfd21f29993f1a6cbd5
-
SHA512
5398353bae9e1e4e422f46b7d4a629685d59657ba3d63d079dfc3cdc2633750af1e29ec3b60dc57fff1602850f9e278b854698cba1b709f1cdfd3c64de42d769
-
SSDEEP
192:6Vo9srn3wDOspRiNPTtc2Wpm35An6oZmnpDMwgyE5cPBGI5AbeV/kBC:6V93w1qNbtbJAnPmnTgd5epa6d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource edb3f639b87893fc9152640afc04e2f8_JaffaCakes118
Files
-
edb3f639b87893fc9152640afc04e2f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
f514abf53fbe4e8bb6e86eff1e837992
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
QueryServiceLockStatusW
kernel32
CreateMailslotA
GetLongPathNameW
HeapLock
user32
CreateMDIWindowA
SetUserObjectInformationW
DdeConnectList
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ