Static task
static1
Behavioral task
behavioral1
Sample
efb87b3d45785d49dad7ef036e651c19_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
efb87b3d45785d49dad7ef036e651c19_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
efb87b3d45785d49dad7ef036e651c19_JaffaCakes118
-
Size
161KB
-
MD5
efb87b3d45785d49dad7ef036e651c19
-
SHA1
d83c95cd8e8a12c324d18d21b01acb3046a120dc
-
SHA256
d7afe7074d46f9daefd555e8cf8a230a18d350339a0c03e5dc11a489a7f91ba0
-
SHA512
3e9d3262c19c999fb7dec56c13f072a5de7ab6c2729536e668943009567955e169bbafcad949fed6d2490486da7635b7f8adf0b32e097ee4709b1826152db191
-
SSDEEP
3072:9Hj+T5Q5aU3+TtpVsyPyA3R4ILeH9Nn7NDg5AmHCcf9xfFdlYMeVyNj9I:9DMe5t3EpDP1FLeH7tg9iU9xN5e6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efb87b3d45785d49dad7ef036e651c19_JaffaCakes118
Files
-
efb87b3d45785d49dad7ef036e651c19_JaffaCakes118.exe windows:4 windows x86 arch:x86
5e1c87513e8b321bdb6c4c8403c3aeee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
ExcludeUpdateRgn
DestroyWindow
SetCapture
ValidateRect
GetCapture
ReleaseCapture
IsWindow
UpdateWindow
EnableWindow
IsWindowEnabled
ValidateRgn
FlashWindow
InvalidateRgn
RealGetWindowClassA
GetUpdateRgn
kernel32
GetLocalTime
FileTimeToLocalFileTime
CreateFiberEx
LocalFileTimeToFileTime
SetCurrentDirectoryW
FreeLibrary
CompareStringA
FindFirstFileW
LoadResource
SetThreadAffinityMask
LCMapStringW
FindClose
EnumResourceNamesW
SetEnvironmentVariableW
SetErrorMode
GetShortPathNameW
GetOEMCP
SetThreadPriority
IsBadReadPtr
SystemTimeToFileTime
GetCurrentProcess
GetSystemDirectoryW
FileTimeToSystemTime
GetStringTypeW
LocalFree
LocalAlloc
FindNextFileW
FindResourceW
SearchPathW
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
Sections
.text Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imul Size: 512B - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ