Static task
static1
Behavioral task
behavioral1
Sample
ef657d82fe0cf5cb7be6ec2415a59733_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ef657d82fe0cf5cb7be6ec2415a59733_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef657d82fe0cf5cb7be6ec2415a59733_JaffaCakes118
-
Size
167KB
-
MD5
ef657d82fe0cf5cb7be6ec2415a59733
-
SHA1
fa5402cafec08f4ae0a8b1f1fb61ebc894d0957e
-
SHA256
14aa6a2aa9d4e9125e1ec6817dd7c06c7ae9ff01353cf2af669226ab7877867a
-
SHA512
38dbe4259ae05fe7bb240690787e9a501ea252190340e5569f65bf1f181295adf72b887d71ac2b17fb56ca6cf5bf63d85aaf750e4ff98d740c8810f4a6bab5ec
-
SSDEEP
3072:Xu4Hd76+SHfsxclF7Vb7NxfY3YaghiqLAr3/YONOekzOr3WIp6zNSH0n/bhdKVdr:+4HJHxcP7JNxfY3Y7MPYokzOrLUzND/w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef657d82fe0cf5cb7be6ec2415a59733_JaffaCakes118
Files
-
ef657d82fe0cf5cb7be6ec2415a59733_JaffaCakes118.exe windows:5 windows x86 arch:x86
6a391c274ac3c925d2c756896b1210bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GlobalMemoryStatusEx
RaiseException
GlobalFix
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
FormatMessageW
LocalFree
SetCurrentDirectoryW
GetExitCodeProcess
CreateMutexW
GetACP
user32
DrawIcon
IsZoomed
LoadIconW
SystemParametersInfoW
GetCursorPos
SetParent
GetWindowDC
wsprintfA
SetWindowPos
GetParent
SetRect
GetWindowRect
SetTimer
ShowWindow
LoadImageW
GetDC
ReleaseDC
FindWindowW
IsWindowEnabled
UpdateWindow
CallWindowProcW
KillTimer
GetActiveWindow
MessageBoxW
InvalidateRect
AppendMenuW
GetClientRect
PeekMessageW
TranslateMessage
EnableWindow
GetClassInfoW
PostMessageW
SendMessageW
odbc32
SQLGetTypeInfoW
Sections
.text Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 67KB - Virtual size: 642KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ