Static task
static1
Behavioral task
behavioral1
Sample
155bcc11af1a652bfbfec971b3ca18c7_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
155bcc11af1a652bfbfec971b3ca18c7_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
155bcc11af1a652bfbfec971b3ca18c7_JaffaCakes118
-
Size
73KB
-
MD5
155bcc11af1a652bfbfec971b3ca18c7
-
SHA1
fabcaf0a51b5fcdcbcad90aa90878409b8c810d1
-
SHA256
91cf09a592a96ddf8a1c71c758c331197bc3644b2050fe2d09a9e2448d46e516
-
SHA512
39f84074d47b7ce3ca3c4e0504afcfc6292f531e2cd0dda546398ff1694abdc474a1a3941348b6f4dfc1dc50223c1139b78354a5772dfe0dd8156e345169ab17
-
SSDEEP
768:oD0R2espbq0jloTAuZ9c5QTJGnPSzZwhFdFYHoDy:fRNspbqkMAuM5+GPnhFdOIu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 155bcc11af1a652bfbfec971b3ca18c7_JaffaCakes118
Files
-
155bcc11af1a652bfbfec971b3ca18c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
04bf4a799a0f91550fce79ca2f070507
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
calloc
exit
_XcptFilter
_exit
_onexit
__dllonexit
??3@YAXPAX@Z
srand
strncpy
__CxxFrameHandler
??2@YAPAXI@Z
_snprintf
malloc
strtol
_controlfp
_itoa
ws2_32
WSAUnhookBlockingHook
connect
accept
WSACancelBlockingCall
kernel32
TlsAlloc
TlsFree
ReadConsoleA
IsBadHugeWritePtr
ExitProcess
FlushFileBuffers
TlsSetValue
FreeResource
CreateFileMappingW
LoadLibraryA
GetProcAddress
DisconnectNamedPipe
IsBadWritePtr
Sleep
CompareStringA
WriteConsoleA
GetStartupInfoA
FindResourceExA
FreeEnvironmentStringsW
GetModuleHandleA
GetTickCount
user32
AnimateWindow
DestroyCursor
ShowWindow
DestroyIcon
CreateWindowExA
EnableMenuItem
TrackPopupMenu
SetFocus
UpdateWindow
InsertMenuA
DestroyMenu
gdi32
SelectObject
CreateDIBitmap
comdlg32
GetSaveFileNameA
PrintDlgA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
q883Ylug Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE