Static task
static1
Behavioral task
behavioral1
Sample
ef1ec3ea1dfdd8a1088b1b9d151af33b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef1ec3ea1dfdd8a1088b1b9d151af33b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef1ec3ea1dfdd8a1088b1b9d151af33b_JaffaCakes118
-
Size
1.2MB
-
MD5
ef1ec3ea1dfdd8a1088b1b9d151af33b
-
SHA1
396e03897a6e1bc3519fdefdda067f9d01b68eca
-
SHA256
4bc7a50ae43722917122de3f595b477ed4b163419db4178ce412c908954069c5
-
SHA512
75fd7e3fd574aef07fa1c274e0046511793dc5d351d2753f9e3ec9dcc31aefca482d68d7a775a0490eb4c552b180142edf84ebabe07579c68368a567c8c65d61
-
SSDEEP
24576:DZKA/RXRRwbsV8EAeTyWUBpZlQpH+keldwoUjXHI9:DZ//Oby8LjXZup4ld4Lo9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef1ec3ea1dfdd8a1088b1b9d151af33b_JaffaCakes118
Files
-
ef1ec3ea1dfdd8a1088b1b9d151af33b_JaffaCakes118.exe windows:5 windows x86 arch:x86
457181dbe7042a242e0e7647575df127
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
ws2_32
inet_ntoa
winmm
mciSendCommandA
iphlpapi
GetAdaptersInfo
mfc90
ord2360
msvcr90
free
user32
SetTimer
gdi32
Escape
advapi32
RegCloseKey
shell32
ShellExecuteA
comctl32
_TrackMouseEvent
msvcp90
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
Sections
.MPRESS1 Size: 1.2MB - Virtual size: 21.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE