Static task
static1
Behavioral task
behavioral1
Sample
ef4eaa1f95912274d21792144fde27d4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef4eaa1f95912274d21792144fde27d4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef4eaa1f95912274d21792144fde27d4_JaffaCakes118
-
Size
256KB
-
MD5
ef4eaa1f95912274d21792144fde27d4
-
SHA1
fe310db6079a61d8c2f23ba9469e3d0652cad48c
-
SHA256
47f123c821f4601ca7f1cd15706abc9d19081015b70b918a184174a197e3f530
-
SHA512
c327fd1f54ee0e82503014d36e712715d521d41f70c3279bcede24974139d16ed57eae27ef273dfddf7d40d15aa5736e3b05ec9b770a2488a1474c6139e6c9aa
-
SSDEEP
6144:6+x2wrDGSkOuOkVU1r3y8EAT1vLRR4r3TJv5+jnyERw518El:6q0E3PpplRsdh+jnRS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef4eaa1f95912274d21792144fde27d4_JaffaCakes118
Files
-
ef4eaa1f95912274d21792144fde27d4_JaffaCakes118.exe windows:4 windows x86 arch:x86
a4fbf67c097e95b2bde0ef7d2b3284ca
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AreFileApisANSI
RtlUnwind
CreateSemaphoreW
IsBadReadPtr
ReleaseSemaphore
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
GetLocalTime
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
CreateSemaphoreW
ReleaseSemaphore
oleaut32
GetRecordInfoFromTypeInfo
OleLoadPicture
SafeArrayPtrOfIndex
SysReAllocStringLen
OleLoadPictureFileEx
VariantClear
OleLoadPictureFile
wtsapi32
WTSRegisterSessionNotification
Sections
.text Size: 159KB - Virtual size: 202KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 290B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ