Static task
static1
Behavioral task
behavioral1
Sample
ef90dff89d26ed06a644083db4794baf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef90dff89d26ed06a644083db4794baf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef90dff89d26ed06a644083db4794baf_JaffaCakes118
-
Size
16KB
-
MD5
ef90dff89d26ed06a644083db4794baf
-
SHA1
98fa77b0fd3b9d08761d24cdc2b9391e1bfe187d
-
SHA256
023e560d3c3c80d7147af830ab21c9a8e72aa77e48062c9b2d53925dda628813
-
SHA512
c6168c6bea31771076dc32b95988e7c44c32dbd0985adc3ccbae1e13b9a3a112edae77ecd26416dfe8b6079b5c9c2b1c7f077af7f3e193984c56f1163f4aa315
-
SSDEEP
384:cb+92WQcLh8LpNgjLwt7W6KGZXE8lnqNHQirARJlCC0IL:2AXQ5dNgAWtMHlqR1r000
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef90dff89d26ed06a644083db4794baf_JaffaCakes118
Files
-
ef90dff89d26ed06a644083db4794baf_JaffaCakes118.exe windows:4 windows x86 arch:x86
e59ca6deaea67349904a96753ad40cf7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
CharLowerBuffA
Sections
.text Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 150B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE