Static task
static1
Behavioral task
behavioral1
Sample
ef8e209d4c2924a3a0ea9f9c5f515f9f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef8e209d4c2924a3a0ea9f9c5f515f9f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef8e209d4c2924a3a0ea9f9c5f515f9f_JaffaCakes118
-
Size
45KB
-
MD5
ef8e209d4c2924a3a0ea9f9c5f515f9f
-
SHA1
88e771640a9d123a0e45e307d00128138d134d9c
-
SHA256
25d9071b10c02e300463946100e1d5dc28fefca4a5645eedab82a1a22dc77800
-
SHA512
89f85357d645208f66fb191a62d8c0e086d7bb23069e7744ad639f60970ce97b2bd8d5b218e5290195e5bf74dcbd994bd94991ebb3500ea0088827c55cbe8883
-
SSDEEP
768:dkBpTDRwCdvmdyWXet53/KCYcaL3B7Ix2uAfLiox613taKYYlG:SD7d+dQ53/KCYHL3RiAfLi7aKYY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef8e209d4c2924a3a0ea9f9c5f515f9f_JaffaCakes118
Files
-
ef8e209d4c2924a3a0ea9f9c5f515f9f_JaffaCakes118.exe windows:4 windows x86 arch:x86
cb48822d4f6af1d36a44f1d7f3aa3efd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
Sections
.text Size: - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ