Static task
static1
Behavioral task
behavioral1
Sample
853754de6b8ffbe1321a8c91aab5c232_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
853754de6b8ffbe1321a8c91aab5c232_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
853754de6b8ffbe1321a8c91aab5c232_JaffaCakes118
-
Size
15KB
-
MD5
853754de6b8ffbe1321a8c91aab5c232
-
SHA1
f838b7197d00e5cc5e751cbc74769eeacaf0756c
-
SHA256
a3a7c241bf3e7cf95dbb0c356bae50b82b6284139ca08f3adbf1ee47719e8ed8
-
SHA512
9557ccdce0eaba458f8f244676774e9eedd46bd3dca965b5484747192bd8fb6830bc7696f3f8fca519e1e79ac0d665585fd6203400dc4d0c15ab73b04559d9cd
-
SSDEEP
192:qiHZpMBi/tqR0i86vuD5A2IXmj3BEWOKM4RxoDKzU1dWmpwxk0M7pApL:5MBi/tchqViWE4RmDKI1dWWwxk0MOpL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 853754de6b8ffbe1321a8c91aab5c232_JaffaCakes118
Files
-
853754de6b8ffbe1321a8c91aab5c232_JaffaCakes118.exe windows:4 windows x86 arch:x86
ba1b33ebc670791d156da4a31c827066
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
ws2_32
WSACleanup
WSAGetLastError
WSAStartup
accept
bind
closesocket
htons
listen
recv
send
shutdown
socket
advapi32
RegCloseKey
RegOpenKeyExA
RegSetValueExA
kernel32
AddAtomA
CopyFileA
CreateFileA
CreateThread
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetFileAttributesA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
SetUnhandledExceptionFilter
Sleep
msvcrt
_strdup
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_findclose
_findfirst
_findnext
_iob
_onexit
_setmode
_stricmp
abort
atexit
fclose
fflush
fopen
fprintf
fread
free
fseek
ftell
gmtime
malloc
memcpy
memmove
memset
rewind
signal
sprintf
strcat
strchr
strcpy
strcspn
strftime
strlen
strncpy
strrchr
strstr
strtol
time
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 176B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE