Static task
static1
Behavioral task
behavioral1
Sample
efdcd6477bc219bfaccc964a537faae2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efdcd6477bc219bfaccc964a537faae2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
efdcd6477bc219bfaccc964a537faae2_JaffaCakes118
-
Size
96KB
-
MD5
efdcd6477bc219bfaccc964a537faae2
-
SHA1
3695ddeb30b2f7d76198e5bf852f5869fa9f028f
-
SHA256
5ddbb0590c8e0db8d7d91b77bd4451e367f594fa598fb2674d79e17ad1556dd0
-
SHA512
c6eacf130a1c37754acd5f792b5b0cacd77fe6d0ef0cbddf60dffd93fffbaa078374114325c32e0e746527f276a794e174765a25d699bbc73791c76c0a69c986
-
SSDEEP
384:bCMYUd5j8PFmlZXtyyUFFLeKnrh6opnOX:3VGYy5FRjh6ogX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efdcd6477bc219bfaccc964a537faae2_JaffaCakes118
Files
-
efdcd6477bc219bfaccc964a537faae2_JaffaCakes118.exe windows:4 windows x86 arch:x86
1bbb10b82e9d9fef7a61502368b46838
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
GlobalUnlock
GetStartupInfoA
GetModuleHandleA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GlobalFree
GlobalLock
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
ExitProcess
GetVersion
GetCurrentProcess
user32
DispatchMessageA
TranslateMessage
GetMessageA
ShowWindow
CreateWindowExA
RegisterClassA
RegisterHotKey
SetTimer
DefWindowProcA
SetCursor
UnregisterHotKey
KillTimer
PostQuitMessage
LoadMenuA
GetSubMenu
TrackPopupMenu
DestroyMenu
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetSystemMetrics
GetDC
GetClientRect
GetCursorPos
ScreenToClient
ClientToScreen
wsprintfA
ReleaseDC
DestroyWindow
LoadCursorA
LoadIconA
gdi32
SelectObject
CreateFontA
DeleteObject
TextOutA
StretchBlt
GetPixel
GetStockObject
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE