Static task
static1
Behavioral task
behavioral1
Sample
0fecaf91f0bd4ce83c734b099e885d3b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0fecaf91f0bd4ce83c734b099e885d3b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0fecaf91f0bd4ce83c734b099e885d3b_JaffaCakes118
-
Size
2.4MB
-
MD5
0fecaf91f0bd4ce83c734b099e885d3b
-
SHA1
e0a67047eb6a29abdab9fc035eb56f73bf44a981
-
SHA256
ea285cc5bbb29ce233358cd8ea4d7bc140c27f35305bcb21cbd1cdf1cf908f79
-
SHA512
6606016c89c5b694aca18875acc00efb7385a404e6b1f7ee7d80a2b81ab489d6005e4adf3b80feb2a34c8295be84b8f6ba92ae84b3fa5540f6ef15bd7b185c71
-
SSDEEP
49152:u2y26GoJdXN0BMOwLloBrugvbtL2tLQwnNTB:uJdXN0B7+sRV2V/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fecaf91f0bd4ce83c734b099e885d3b_JaffaCakes118
Files
-
0fecaf91f0bd4ce83c734b099e885d3b_JaffaCakes118.exe windows:4 windows x64 arch:x64
0836776cfd75ef804975d0c2a2aa0da0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB Paths
Imports
cygwin1
__cxa_atexit
__errno
__getreent
__main
_dll_crt0
_impure_ptr
calloc
chdir
clock_gettime
close
cygwin_conv_path
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
environ
execvp
exit
fchmod
fcntl
fgetc
forkpty
free
getcwd
getenv
gethostname
getlogin
getpgid
getpgrp
getpid
getppid
ioctl
isatty
kill
localtime
login
malloc
memcpy
open
perror
posix_memalign
printf
ptsname
puts
read
realloc
select
setenv
signal
sleep
sprintf
strchr
strcmp
strcpy
strerror
strlen
strncmp
strrchr
strsignal
strstr
tcgetattr
tcgetpgrp
tcsetattr
time
ttyname
vsnprintf
waitpid
write
kernel32
FreeLibrary
GetCommandLineW
GetConsoleScreenBufferInfo
GetModuleHandleA
GetProcAddress
GetStdHandle
GetTickCount
IsDebuggerPresent
LoadLibraryA
SetConsoleCtrlHandler
WideCharToMultiByte
WriteConsoleA
lstrcpynA
lstrlenW
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.buildid Size: 512B - Virtual size: 53B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 512B - Virtual size: 408B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 544B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE