Static task
static1
Behavioral task
behavioral1
Sample
efc1e19ec853f079fc0c0607ad99c81f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efc1e19ec853f079fc0c0607ad99c81f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
efc1e19ec853f079fc0c0607ad99c81f_JaffaCakes118
-
Size
28KB
-
MD5
efc1e19ec853f079fc0c0607ad99c81f
-
SHA1
9e9eb0744ea2abc03f1ac16effa024d6cec4f8aa
-
SHA256
a17c1265b818f565427b6f9efd7a850c47342c15a207f25e23e7f4e654c9c0c9
-
SHA512
2a34de1d2d9c77c8346de06c9385da63d03e8f8dc1900b8f05d747e73e1f3aa5a42eb5dd9b141ea3e5fcd617d8ab1d5f7bedd70aa843bca8c6ecfd62f26b17d9
-
SSDEEP
768:nIt+/G0Us9AuGVZ39NbhA3pHOzeafhopm:nIIO0Us9AuoNA3VwDpim
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efc1e19ec853f079fc0c0607ad99c81f_JaffaCakes118
Files
-
efc1e19ec853f079fc0c0607ad99c81f_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 23KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE