Static task
static1
Behavioral task
behavioral1
Sample
0f7ff5bfaa5011635fa44e1c663d3cec_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0f7ff5bfaa5011635fa44e1c663d3cec_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0f7ff5bfaa5011635fa44e1c663d3cec_JaffaCakes118
-
Size
116KB
-
MD5
0f7ff5bfaa5011635fa44e1c663d3cec
-
SHA1
9a70b7ef602daee3d4524e4d38c0697be9edff2d
-
SHA256
b9a27e6b6da179144ecaf117b968d0ae059cda8d1df50a39b5f81cffa6f3457b
-
SHA512
d50d0d65bedfa135e6e0b3ffa081a7ccd31f5447678ceaae221dad0fcda66f94f3a98d40703c94a479d37ebf9068b64aebecdd92e8fa329222023e8d5e2384a8
-
SSDEEP
3072:LVzeHds5Ani89CAx0mMMd12LHN9+dg0t73Y:Jgsai8jSMd12BQdJ7o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f7ff5bfaa5011635fa44e1c663d3cec_JaffaCakes118
Files
-
0f7ff5bfaa5011635fa44e1c663d3cec_JaffaCakes118.exe windows:4 windows x86 arch:x86
fecb08c9b80621bebbb1de65d32f36f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
libgpnet
ord9
ord37
ord36
ord1
ord35
ord23
ord27
ord20
ord2
ord8
ord4
ord7
ord14
ord22
ord30
ord17
ord16
ord15
ord6
ord12
ord13
ord5
libtux
ord262
ord328
ord82
ord536
ord537
ord639
ord640
ord642
ord641
ord498
ord265
ord266
ord211
ord551
ord645
ord647
libengine
ord161
ord156
ord230
ord154
ord6
ord353
ord357
ord356
ord616
ord164
ord77
ord155
ord394
ord140
ord625
ord624
ord395
ord292
ord214
ord355
ord290
wsock32
setsockopt
htonl
ntohl
msvcrt
strncmp
_isctype
_pctype
memset
free
realloc
strchr
strncpy
_XcptFilter
memcpy
calloc
strlen
sprintf
atol
_errno
malloc
sscanf
__setusermatherr
__mb_cur_max
_exit
_adjust_fdiv
exit
__p___initenv
__getmainargs
_initterm
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE