Static task
static1
Behavioral task
behavioral1
Sample
8e51f53d8b21d6a8b4141935165dd648_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8e51f53d8b21d6a8b4141935165dd648_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8e51f53d8b21d6a8b4141935165dd648_JaffaCakes118
-
Size
184KB
-
MD5
8e51f53d8b21d6a8b4141935165dd648
-
SHA1
7e6a293d2b1a2e10412d64bc7571b6469cdfc8bf
-
SHA256
da682f2ca36ffbfb5c8acdd829c0e02b50a37333f8f0405addc21f4f5c54b597
-
SHA512
4f872bbe216dee88668d146a353cedd45a841e738580cc52e4263fae63627a03e331069fc16bfa896792d3138a26508edc562e1f2c51648884c004fa52ab22af
-
SSDEEP
3072:Jty56baw8BCq9wFqUof4LHVXyVR+4lIgcfNi:Z/Rjof+yHFlIgcg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e51f53d8b21d6a8b4141935165dd648_JaffaCakes118
Files
-
8e51f53d8b21d6a8b4141935165dd648_JaffaCakes118.exe windows:4 windows x86 arch:x86
74716a192c9dbda3f89d646e44555f91
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
_setmode
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_filelengthi64
_iob
_onexit
_setmode
abort
atexit
atof
atoi
atol
calloc
fclose
fflush
fgetpos
fopen
fprintf
fputc
fread
free
fseek
fsetpos
fwrite
getenv
localeconv
malloc
memcmp
setlocale
signal
strchr
strcmp
vfprintf
wcslen
ws2_32
WSACleanup
WSAStartup
librtmp
AMFProp_GetNumber
AMFProp_GetString
AMF_Decode
AMF_DecodeInt24
AMF_DecodeInt32
AMF_Dump
AMF_GetProp
RTMPPlugin_OptUsage
RTMPProtocolStringsLower
RTMP_Close
RTMP_Connect
RTMP_ConnectStream
RTMP_DefaultFlashVer
RTMP_FindFirstMatchingProperty
RTMP_GetDuration
RTMP_GetTime
RTMP_GlobalInit
RTMP_HashSWF
RTMP_Init
RTMP_IsConnected
RTMP_IsTimedout
RTMP_Log
RTMP_LogPrintf
RTMP_LogStatus
RTMP_Read
RTMP_ReconnectStream
RTMP_SetBufferMS
RTMP_SetOpt
RTMP_SetupStream
RTMP_SetupURL
RTMP_ToggleStream
RTMP_UpdateBufferMS
RTMP_ctrlC
RTMP_debuglevel
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 628B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/14 Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/29 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/45 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/61 Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/73 Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/87 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/99 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/112 Size: 1024B - Virtual size: 523B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/123 Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/134 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ