Static task
static1
Behavioral task
behavioral1
Sample
efe4c4fac9e34c8f93d49722c3a5acf8_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
efe4c4fac9e34c8f93d49722c3a5acf8_JaffaCakes118
-
Size
199KB
-
MD5
efe4c4fac9e34c8f93d49722c3a5acf8
-
SHA1
9303bde809cf4d05acd4c3cf8a442c9c5c857a20
-
SHA256
dd15c016290ee21e34b2c2ae0bc9f9d7a387c53f6950b893082b05b449545dfe
-
SHA512
882c1d8be5c664620b0daed009110a131eef3c9571fa8824ddcf6599ead2b559ca6c096607b2c532b09a23264bbb2ae33e4185d79cd7b2a76045872d26ae8273
-
SSDEEP
3072:zabk4pjP1E5PIRcLt1T9tRfRhs4uXJ2yy5IvaDx1j6quYPDldnvPyePXFFs:zabRjPUPgcLD5tqjwyNcxRhuY7vievA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efe4c4fac9e34c8f93d49722c3a5acf8_JaffaCakes118
Files
-
efe4c4fac9e34c8f93d49722c3a5acf8_JaffaCakes118.exe windows:4 windows x86 arch:x86
bb01a0fc3b776b726f021c130629577a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
VirtualAlloc
VirtualFree
GetModuleHandleA
user32
MessageBoxA
Sections
� Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
� Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
� Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
skspy Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE