Static task
static1
Behavioral task
behavioral1
Sample
efc0e86c4175bff1f563584156c255e2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
efc0e86c4175bff1f563584156c255e2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
efc0e86c4175bff1f563584156c255e2_JaffaCakes118
-
Size
15KB
-
MD5
efc0e86c4175bff1f563584156c255e2
-
SHA1
000e8d5c57dd7956e79203a91ba6aeaba39d3fc8
-
SHA256
5dbca0e894701ffcb6b7b31be6edfebffefbd1223e1f6b3f2e0c0a08d68bb8d4
-
SHA512
3fe696e2db110d6f893468754828861822f09322d08ca06dad22ac7099b2d7e98af5ba1f0af2f3a6374f753662cffd1fa306c16ace3f57a03da851e8a689de17
-
SSDEEP
384:+jNloE0Pf/SkChw60EV0KUm/pnLpmYOS:+jN4PqaMUu1m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efc0e86c4175bff1f563584156c255e2_JaffaCakes118
Files
-
efc0e86c4175bff1f563584156c255e2_JaffaCakes118.exe windows:4 windows x86 arch:x86
0b73cda72d2f5cb6bccc46f6ee7d366f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateWaitableTimerA
ExitProcess
FindResourceA
GetLastError
GetProcAddress
LoadLibraryA
LoadResource
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepEx
VirtualAlloc
VirtualFree
Sections
.text Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE