Static task
static1
Behavioral task
behavioral1
Sample
ef21b8b31b6be774f27097b51631ed1e_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
ef21b8b31b6be774f27097b51631ed1e_JaffaCakes118
-
Size
2.8MB
-
MD5
ef21b8b31b6be774f27097b51631ed1e
-
SHA1
e04de5f2aca3714b86815f7e42262a0c1a583dac
-
SHA256
0ce5c399afbf6ff1b21b41789ab82ccd79a6019cfa3325f71ac2be5f52bdea67
-
SHA512
976b7f94183c5063030b8d1a041e0d217b56683c9fee4d93f4344f2321cad55fdfb2a3748e7d835faf50fcc2031d14733eea2a3bf6c4b3ca162422c74138c1a5
-
SSDEEP
49152:9jW2PSf6sJ2ehJ2guiUBYKdwYRGXEVMbqJ/r0/AJt8M:9jXP4J2LmUBuUGu0qJ/rd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef21b8b31b6be774f27097b51631ed1e_JaffaCakes118
Files
-
ef21b8b31b6be774f27097b51631ed1e_JaffaCakes118.exe windows:4 windows x86 arch:x86
8b84bb012654768d9c6c828ef931271b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
SetFilePointer
Sections
xozddtod Size: 318KB - Virtual size: 724KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fgnxjfqm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmclyvaf Size: 2.4MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bkdlwnsh Size: 76KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE