Static task
static1
Behavioral task
behavioral1
Sample
5e6c0813c35c0b5ea47e23a839837860_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5e6c0813c35c0b5ea47e23a839837860_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e6c0813c35c0b5ea47e23a839837860_JaffaCakes118
-
Size
8KB
-
MD5
5e6c0813c35c0b5ea47e23a839837860
-
SHA1
c7f25dfd314634dc3b48de974de60c8374bfa011
-
SHA256
17bd4f9ee5108818e5c898c201d96b87378b38025c8ff7fc70f930a8b4f7cd6f
-
SHA512
f4ee93107c2754a3f8f2ced42781455ae74115a906b8dd1facf88791806dba8a35c5bd4287c09d0c5ef7d1dff2d07af1ea06aade903ac0ab97fae2e43680c259
-
SSDEEP
96:1LwoHPJPVO1FwUVXBrqEMrW+o12MBKEHYSXIJXIJkPoYkXzMDA:aoHP+bqEQSIRIJkwYkXze
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e6c0813c35c0b5ea47e23a839837860_JaffaCakes118
Files
-
5e6c0813c35c0b5ea47e23a839837860_JaffaCakes118.exe windows:4 windows x86 arch:x86
d458e7e9f48703be582fb7cd251ede54
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
kernel32
AddAtomA
CopyFileA
CreateMutexA
CreateProcessA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetSystemDirectoryA
SetUnhandledExceptionFilter
WaitForSingleObject
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
memset
signal
sprintf
strcat
strcpy
strlen
ws2_32
WSACleanup
WSAConnect
WSASocketA
WSAStartup
closesocket
gethostbyname
htons
inet_addr
inet_ntoa
send
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 416B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE