Static task
static1
Behavioral task
behavioral1
Sample
efbde4221b0541decad191aa8ef8f9b4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efbde4221b0541decad191aa8ef8f9b4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
efbde4221b0541decad191aa8ef8f9b4_JaffaCakes118
-
Size
41KB
-
MD5
efbde4221b0541decad191aa8ef8f9b4
-
SHA1
a91f8bbd4943f38d87007d452e3d4bacd28413c0
-
SHA256
76c0c5b98d84ac4881b653ee2e3570b56ff51e0490d747c01d34d6fcf21b03e1
-
SHA512
1b9c8fbe3ec1c191dcb6f3109a9750b2f9c79e33a53301a634714047f3d26480d667d0e6fb39d0618e04eb2b407762c73ac2e341dcd9dcb0dad97d85877f5d6d
-
SSDEEP
768:wLTFU0BZjSc7oktusxFYtnO7PYtzMcXWJXq3t32ChaQldLFkM1FfXZ:WpU0BZjH7DtusxoOazZXWJ693vh3lsMV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efbde4221b0541decad191aa8ef8f9b4_JaffaCakes118
Files
-
efbde4221b0541decad191aa8ef8f9b4_JaffaCakes118.exe windows:5 windows x86 arch:x86
d0350768b13c4f100c12a35f80cc149b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHBrowseForFolderW
Sections
.hcpmz Size: 33KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bmj Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hct Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xyz Size: 1024B - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE