Static task
static1
Behavioral task
behavioral1
Sample
efe74925796894cef3bc933317a8dc8e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
efe74925796894cef3bc933317a8dc8e_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
efe74925796894cef3bc933317a8dc8e_JaffaCakes118
-
Size
8KB
-
MD5
efe74925796894cef3bc933317a8dc8e
-
SHA1
8870a11a8d90d58affeb7b5ceaff0e384f29025f
-
SHA256
9b7f1ad6c90e63ecebdb27229386f5c33859b532cb6216bf2c3a949d00579b1b
-
SHA512
882bbc688b1094f5335a8681eeab0bfd886b7dd5aff6cc9383b9f4b3a921fd0e1e28ec5e5e54bc20bf343ae4bc656fab9ccc12414dbace6d260e1a8ba55c701b
-
SSDEEP
192:nqsf7SYVV+xBVzrrrrrrrBN39jnjnjnjnjnjnjeB1NLWqccysMPKnxi:qiip5d9jnjnjnjnjnjnjWttylPK0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efe74925796894cef3bc933317a8dc8e_JaffaCakes118
Files
-
efe74925796894cef3bc933317a8dc8e_JaffaCakes118.exe windows:4 windows x86 arch:x86
99b83e42dca5d2bd2b97d560051d218c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DebugBreak
DisableThreadLibraryCalls
EndUpdateResourceA
EscapeCommFunction
FlushConsoleInputBuffer
GetCPInfo
msvcrt
?_query_new_mode@@YAHXZ
perror
setlocale
strncpy
strcpy
tmpnam
ungetwc
urlmon
HlinkGoBack
URLOpenPullStreamA
UrlMkBuildVersion
GetClassURL
GetMarkOfTheWeb
user32
ClipCursor
CloseWindowStation
CreateDesktopA
DlgDirListA
DrawCaption
EndPaint
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE