Static task
static1
Behavioral task
behavioral1
Sample
59dcc212f3ab245f4e4ac449140e3b5f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
59dcc212f3ab245f4e4ac449140e3b5f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
59dcc212f3ab245f4e4ac449140e3b5f_JaffaCakes118
-
Size
21KB
-
MD5
59dcc212f3ab245f4e4ac449140e3b5f
-
SHA1
802ec474503fde28249a7e7df5d7dcc7f1b0cd9c
-
SHA256
f44bdcb03a4e507ab53beb8bddc71f2d04e780702a14a5680765862b970eb0d5
-
SHA512
3a1db9c354e5c8a94758473bb3418d441063fa1a49e5b451636abd065e7468832fc384ab671a753dad4ad0be0ba1e09e2225c81b2543ed1ff55b4190e60f0316
-
SSDEEP
384:wxzooIeLTpEBV5CqUYqchvWD8xEMhPF0xypoWGUl:MooIiTpEBnUxD8iMwyb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59dcc212f3ab245f4e4ac449140e3b5f_JaffaCakes118
Files
-
59dcc212f3ab245f4e4ac449140e3b5f_JaffaCakes118.exe windows:4 windows x86 arch:x86
9bf6fe94e714dcb0bb7343670e714a11
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ExitProcess
GetTickCount
SetUnhandledExceptionFilter
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
atoi
calloc
exit
free
fwrite
malloc
memcpy
memset
perror
printf
puts
rand
realloc
setbuf
signal
sprintf
sscanf
strncpy
ws2_32
WSACleanup
WSAGetLastError
WSARecvFrom
WSASendTo
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
gethostbyaddr
gethostbyname
htonl
htons
ioctlsocket
listen
ntohl
ntohs
select
setsockopt
socket
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 160B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE