Static task
static1
Behavioral task
behavioral1
Sample
64149658c54aa78598b0defc3d46a1bd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
64149658c54aa78598b0defc3d46a1bd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64149658c54aa78598b0defc3d46a1bd_JaffaCakes118
-
Size
663KB
-
MD5
64149658c54aa78598b0defc3d46a1bd
-
SHA1
1857301230f5bda079e9d80660fff6156176ed4d
-
SHA256
453444e197ff5e7d369fb248feb1cea3a565b42835f0a58aa2b13f81b8051a03
-
SHA512
2fb4177df57542c85fbda2c5dea0fe70d6da812ff25b7fa1938d443206d4b64b92675318d798c31835e20af391cf847d1ccf2f6c45981c6db30bf5c609c92b3c
-
SSDEEP
12288:8c9RVFZolqkJ+YAvKbG1M2GAu1mt0LDwrep:8GSqVYAvdM84p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64149658c54aa78598b0defc3d46a1bd_JaffaCakes118
Files
-
64149658c54aa78598b0defc3d46a1bd_JaffaCakes118.exe windows:4 windows x86 arch:x86
5b56b877ba8c8411a34ee0681933e40b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB Paths
Imports
cygwin1
GetCommandLineW@0
__cxa_atexit
__errno
__getreent
__main
_dll_crt0@0
_fcntl64
_impure_ptr
_open64
calloc
chdir
clock_gettime
close
cygwin_conv_path
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
execvp
exit
fchmod
fcntl
fgetc
forkpty
free
getcwd
getenv
gethostname
getlogin
getpgid
getpgrp
getpid
getppid
ioctl
isatty
kill
localtime
login
malloc
memcpy
open
perror
posix_memalign
printf
ptsname
puts
read
realloc
select
setenv
signal
sleep
sprintf
strchr
strcmp
strcpy
strerror
strlen
strncmp
strrchr
strsignal
strstr
tcgetattr
tcgetpgrp
tcsetattr
time
ttyname
vsnprintf
waitpid
write
kernel32
FreeLibrary
GetConsoleScreenBufferInfo
GetModuleHandleA
GetProcAddress
GetStdHandle
GetTickCount
IsDebuggerPresent
LoadLibraryA
SetConsoleCtrlHandler
WideCharToMultiByte
WriteConsoleA
lstrcpynA
lstrlenW
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.buildid Size: 512B - Virtual size: 53B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 356B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE