Static task
static1
Behavioral task
behavioral1
Sample
ef2f3d4f3fda0c6ebdd92254209e30e3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef2f3d4f3fda0c6ebdd92254209e30e3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef2f3d4f3fda0c6ebdd92254209e30e3_JaffaCakes118
-
Size
7KB
-
MD5
ef2f3d4f3fda0c6ebdd92254209e30e3
-
SHA1
154a20eb318e2190b6373f9e29a5a988229def7d
-
SHA256
c246370c83d4ecfc6e0136581afd381a4c12c6726046deaa7af78942cbd94ba2
-
SHA512
cee26a034046b9dbf7e52fe739928929c10b536c81bdd538832d088ad5df16bf2e9d9a5f63f411e4e0785f62e84829eeea4e3873114522e51415c6f2b31b302f
-
SSDEEP
96:nO4X1c6fXkkZSBBUSilnzmnVGDiWlokrwxY26uU0avPDe:OA1ckk3BTilzUPzkrwxYooDe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef2f3d4f3fda0c6ebdd92254209e30e3_JaffaCakes118
Files
-
ef2f3d4f3fda0c6ebdd92254209e30e3_JaffaCakes118.exe windows:4 windows x86 arch:x86
cbf47572e8cb446c01bd5522c7d7f827
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameW
UnmapViewOfFile
lstrcpynW
GetFullPathNameW
SetEnvironmentVariableW
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
WideCharToMultiByte
GetEnvironmentVariableW
GetVersion
user32
MessageBoxA
Sections
.text Size: 6KB - Virtual size: 908KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE