Static task
static1
Behavioral task
behavioral1
Sample
f39fcd3d25919a6c3a36fd4f2e1be572_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f39fcd3d25919a6c3a36fd4f2e1be572_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f39fcd3d25919a6c3a36fd4f2e1be572_JaffaCakes118
-
Size
11KB
-
MD5
f39fcd3d25919a6c3a36fd4f2e1be572
-
SHA1
9d8001f11e583777a44a0f3bb4a31c84377e3bd5
-
SHA256
5d057c2e7dbc4c370013c66d13191166859141fa3b96701c95a0f0659078c687
-
SHA512
59a175e02929d053753ad0ce2ff39afb5b8b10a61c78c3df7a17a4d6385f59149afe16d97781b240a5a6171fa7ac877347bf163b023e3ab31aab9304b649a9e7
-
SSDEEP
192:6eTHnka63WXSnlVzLXaScKhLL+nBWg2/3is:6B33WCld7FcKhn+I3/y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f39fcd3d25919a6c3a36fd4f2e1be572_JaffaCakes118
Files
-
f39fcd3d25919a6c3a36fd4f2e1be572_JaffaCakes118.exe windows:4 windows x86 arch:x86
e6d4d4d27f28e2d0f3d44f1a8257201c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
AllocConsole
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter
Sleep
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
ctime
exit
fclose
fflush
fopen
fprintf
fputc
fputs
fread
free
fseek
ftell
malloc
memcpy
memset
perror
signal
strcat
strcpy
strlen
strncat
time
user32
FindWindowA
GetAsyncKeyState
ShowWindow
ws2_32
WSACleanup
WSAStartup
closesocket
connect
gethostbyname
htons
recv
send
socket
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 176B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE