Static task
static1
Behavioral task
behavioral1
Sample
efe7032fd0654f4835c9eb472417da26_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efe7032fd0654f4835c9eb472417da26_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
efe7032fd0654f4835c9eb472417da26_JaffaCakes118
-
Size
38KB
-
MD5
efe7032fd0654f4835c9eb472417da26
-
SHA1
bbad92ff4b6174e9ff62cb8581e750a4daba3cd7
-
SHA256
a2a2e6cce44d9763275af6960d3fb3f5581078efc4f71254ecf56ccdc886dfe2
-
SHA512
433d1b297dd64185ddc8573a85792f515f6f58063976da26188e195e389890ea3f9c031b9db6e56cc17652e34c102e3280acafa2c7638b13bb3ea2829e148934
-
SSDEEP
384:NzciUtPtQD8FCOdMicCoRRPShH3euzIjo7DOa7CTMUosGrMU+EP/2rWYeOqoFgh6:QoGrcvjPShOusw96xCgUHOWYefFE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efe7032fd0654f4835c9eb472417da26_JaffaCakes118
Files
-
efe7032fd0654f4835c9eb472417da26_JaffaCakes118.exe windows:5 windows x86 arch:x86
a2d583a901565ab6f15dda908250518f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetConsoleCP
ExitThread
LeaveCriticalSection
InterlockedExchange
SetUnhandledExceptionFilter
CloseHandle
AddAtomW
ClearCommBreak
GetTempPathW
EnterCriticalSection
CreateFileW
EnumDateFormatsExW
OpenEventW
GetSystemTimeAsFileTime
GetUserDefaultLCID
VirtualAlloc
GetLastError
OpenDataFile
CancelTimerQueueTimer
GetFileSize
GetCurrentThreadId
GetModuleHandleW
GetCurrentProcessId
FatalExit
MoveFileA
CancelIo
GlobalAddAtomW
DeactivateActCtx
DeleteTimerQueue
msvcrt
_close
_access
_atoldbl
_c_exit
_atoi64
_chdir
_assert
ws2_32
WSACleanup
bind
listen
socket
WSAStartup
connect
WSAGetServiceClassInfoW
closesocket
accept
send
Sections
.data Size: - Virtual size: 522KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ