Static task
static1
Behavioral task
behavioral1
Sample
ef5767dbea8c90323673298bf281ef6d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ef5767dbea8c90323673298bf281ef6d_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
ef5767dbea8c90323673298bf281ef6d_JaffaCakes118
-
Size
151KB
-
MD5
ef5767dbea8c90323673298bf281ef6d
-
SHA1
374734c10ebaca6305b9b4185071e10cf865409b
-
SHA256
13417c0f9c80224969e5c8b57f90b2bbdd9ea6f01f1065bdfb008609038b0b0b
-
SHA512
8bef321b92c8b6e8d6a6e1d755d492be2fe3d40467561d58902f4e453530ff1e1881e6fbadca1039840ced5fd38fb0cbf363f4078d3fa6c43bbfcb67c7592bd1
-
SSDEEP
3072:q6xGwsvTZtXQcxUpCwzXrztg++zE4MNFGqvXeLlL4:qXX9lQcXQ7uMF5vuRL4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef5767dbea8c90323673298bf281ef6d_JaffaCakes118
Files
-
ef5767dbea8c90323673298bf281ef6d_JaffaCakes118.exe windows:4 windows x86 arch:x86
2dff052f5ea71c04339424ed04ff9607
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetMapMode
GetTextMetricsW
EqualRgn
EndDoc
Escape
FillPath
CreatePalette
GetBkColor
GetBrushOrgEx
GetCharWidthW
GetClipBox
GdiFlush
GetMapMode
GetMiterLimit
GetPixel
CreateCompatibleDC
FillRgn
GetRelAbs
SetBkColor
GetTextFaceW
kernel32
ExitProcess
InitAtomTable
CreateFileW
WriteFile
ReadFile
SetConsoleCP
GetModuleHandleW
GetProcAddress
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 146KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE