Static task
static1
Behavioral task
behavioral1
Sample
2737e01fff5238dd8d3f616c08c790ec_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2737e01fff5238dd8d3f616c08c790ec_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2737e01fff5238dd8d3f616c08c790ec_JaffaCakes118
-
Size
51KB
-
MD5
2737e01fff5238dd8d3f616c08c790ec
-
SHA1
41e77f8497fc59590940666f8b760974fa6ea2f7
-
SHA256
42837418a99817f95542a8574ba27b3b5e631c2c203e8dfd8a01e5061898e94c
-
SHA512
c1670e06b3fdee13b1f76b31eab2dcad832ca63cde54f513da1b9c63521ef7f8367ab45afd3491ea8bfefe8535714c8b13ae8265ee402f1fb7984dd8448a44d3
-
SSDEEP
768:cwasikqDrWCjCh1xDPJLK9ZMCd0fd8gXJGTr:QLzI1xhK7MCeer
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2737e01fff5238dd8d3f616c08c790ec_JaffaCakes118
Files
-
2737e01fff5238dd8d3f616c08c790ec_JaffaCakes118.exe windows:4 windows x86 arch:x86
54ad98a78c84f136c08eacf5094038c1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
CloseHandle
CreatePipe
CreateProcessA
CreateThread
DisconnectNamedPipe
DuplicateHandle
ExitProcess
ExitThread
FindAtomA
FreeConsole
GetAtomNameA
GetCurrentProcess
GetLastError
GetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TerminateThread
WaitForMultipleObjects
WriteFile
msvcrt
_close
_dup
_itoa
_kbhit
_open
_read
_strcmpi
_strnicmp
_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_isatty
_onexit
_setjmp
_setmode
_sleep
abort
atexit
atoi
exit
fflush
fprintf
free
getenv
gets
longjmp
malloc
memcmp
memcpy
memset
rand
signal
sprintf
srand
strcat
strchr
strcmp
strcpy
strlen
strncmp
strncpy
time
wsock32
WSACleanup
WSAGetLastError
WSASetLastError
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
gethostbyaddr
gethostbyname
getservbyname
getservbyport
getsockname
htons
inet_addr
inet_ntoa
listen
ntohs
recv
recvfrom
select
send
setsockopt
shutdown
socket
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 576B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE