Static task
static1
Behavioral task
behavioral1
Sample
efbc6a648ac6c6b0f3e251def4ce8d00_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efbc6a648ac6c6b0f3e251def4ce8d00_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
efbc6a648ac6c6b0f3e251def4ce8d00_JaffaCakes118
-
Size
29KB
-
MD5
efbc6a648ac6c6b0f3e251def4ce8d00
-
SHA1
3b203e1f30183bf6b0bffe4bef6298555951937a
-
SHA256
33cd93d02126f44c9a1de1543d93219774a6a2415289c46feff09fc5bd35f36e
-
SHA512
536c534289177ac2b848a2ef549ecab809f1ae220e3eaa54cbfe3298f2a29692a2332c6350234da4bbed663343cb4645a77a3424e0d714766a94202223734df9
-
SSDEEP
384:4mYqkfcF3fYjaSO8wL1ymWWWWWWWWWWWWWWWWWWWWWWWWWWW+J1Atdw444YJLW1p:Z2cijQyOwtdw4fCa1Qi+0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efbc6a648ac6c6b0f3e251def4ce8d00_JaffaCakes118
Files
-
efbc6a648ac6c6b0f3e251def4ce8d00_JaffaCakes118.exe windows:4 windows x86 arch:x86
133f12b5c8ccd3a700d3eb53cbb31001
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
ExitProcess
LoadLibraryA
VirtualProtect
GetLastError
user32
DialogBoxParamA
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 250B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ