Static task
static1
Behavioral task
behavioral1
Sample
95fc37cc380dcb3ae02b3dca369dbe46_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
95fc37cc380dcb3ae02b3dca369dbe46_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
95fc37cc380dcb3ae02b3dca369dbe46_JaffaCakes118
-
Size
20KB
-
MD5
95fc37cc380dcb3ae02b3dca369dbe46
-
SHA1
4adb49dd732fd62050fa51d01ad14b0e08c4a784
-
SHA256
7fe4403f3056ed9fd5e72b32bfd0be1ba64a96f20600029c12e8fcd9892541d1
-
SHA512
f4a849df722c77c2087ec940c8ed06074abe27c32dd5afe76b76ec002360febbd4a8bd087bf426fd0bf1f9c7483753853055a2199c56e1ee260c1b82a9c9bede
-
SSDEEP
384:BmY7GzvoIRl+CIszNkgozaPsJxiHujWNUHOkQhyPhyqVVkZwG:DCIszuJ1JxyuzHOYPhyqVM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95fc37cc380dcb3ae02b3dca369dbe46_JaffaCakes118
Files
-
95fc37cc380dcb3ae02b3dca369dbe46_JaffaCakes118.exe windows:4 windows x86 arch:x86
104d384de57c2046493d9d5a3fca2023
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msys-1.0
__errno
__main
_ctype_
abort
atexit
calloc
cygwin_conv_to_posix_path
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fflush
fputs
free
getenv
malloc
memcpy
memset
putc
realloc
setlocale
strchr
strcmp
strerror
strlen
strncmp
vsnprintf
msys-intl-8
__printf__
libintl_bindtextdomain
libintl_fprintf
libintl_gettext
libintl_textdomain
libintl_vfprintf
kernel32
GetModuleFileNameA
GetModuleHandleA
GetStdHandle
VirtualProtect
VirtualQuery
WriteFile
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data_cy Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 560B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE