Static task
static1
Behavioral task
behavioral1
Sample
ef787d7abbe3ac05cfa0437e9e2b0561_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef787d7abbe3ac05cfa0437e9e2b0561_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef787d7abbe3ac05cfa0437e9e2b0561_JaffaCakes118
-
Size
59KB
-
MD5
ef787d7abbe3ac05cfa0437e9e2b0561
-
SHA1
974ec50c3473545bcc618c167624d752ba39c3cf
-
SHA256
fa9b45067ac559a5a305ad5b9ad6998f2123ef05375b8e62052a055d2b9d84b9
-
SHA512
67e68b5ca8c5da665049828428618915da18c847c123106c61dd17fcf68fec333e5421a10a16898342bb38542cb080e37dd82f5f2ea8952e43784beee3c18feb
-
SSDEEP
768:I7IEU20qq8dE0PAs3/PyXdhJw1spAYFr6G7UrZa9agJmd5AydhF7NT:Qe6E0PA0/Udhq1spPmCUrk9tmrL9NT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef787d7abbe3ac05cfa0437e9e2b0561_JaffaCakes118
Files
-
ef787d7abbe3ac05cfa0437e9e2b0561_JaffaCakes118.exe windows:14771 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
qyrabrra Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rarqqjyz Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bzbyqqjb Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yjzbyjay Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ