Static task
static1
Behavioral task
behavioral1
Sample
efbd6daf5a73fa6398538f1eec1f48a2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efbd6daf5a73fa6398538f1eec1f48a2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
efbd6daf5a73fa6398538f1eec1f48a2_JaffaCakes118
-
Size
62KB
-
MD5
efbd6daf5a73fa6398538f1eec1f48a2
-
SHA1
b757cb784892f09a95c3438c26495de43e76fad8
-
SHA256
54944d82478822ec9c2bd32be90842d90add0bd775da36aeafbd8021aecc299f
-
SHA512
619e7b42836bea73717f562bfcd492228ace45b1eef0429af5519aa8a0da9ef59249b3793312d2189b3d6df7ad5a0238295a61aa8d24adec9e49c6b6a895ba07
-
SSDEEP
768:kE0kvh+FJ94Bq88cpLMEmegDGa1FYYZDdop/++pL98YZcy4Jto5u0FMtbp4jKpKy:kjn4V8i/e9FYokVgtku0Fe2ab1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efbd6daf5a73fa6398538f1eec1f48a2_JaffaCakes118
Files
-
efbd6daf5a73fa6398538f1eec1f48a2_JaffaCakes118.exe windows:4 windows x86 arch:x86
eb7a4932d1b3c4321b977aac3ceb86b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitThread
CreateThread
FatalExit
ExitProcess
CreateThread
user32
GetMenuState
CharToOemW
GetClassWord
DestroyCursor
CreateIconIndirect
FindWindowW
GetUpdateRgn
shell32
DriveType
FreeIconList
OpenAs_RunDLL
SHFindFiles
SHFree
SHUnlockShared
PathResolve
SheConvertPathW
Sections
.text Size: 39KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE