Static task
static1
Behavioral task
behavioral1
Sample
962a64339feffc1f9f1be75c6e20ebef_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
962a64339feffc1f9f1be75c6e20ebef_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
962a64339feffc1f9f1be75c6e20ebef_JaffaCakes118
-
Size
129KB
-
MD5
962a64339feffc1f9f1be75c6e20ebef
-
SHA1
9628a03c456fbe9c703a9835581456c4043370f1
-
SHA256
c228f7e300d09e69d216e4bb13ac96989151fc37c34a1f116d3524520467c8be
-
SHA512
069e08b19d72bdabf80509003e1fd19d822afc8f16007c1eae7725cd283ae5b66811b31959e1a915e6487b680c96268fc7ce81db340ba8b49a459b7cd3fcf4bc
-
SSDEEP
3072:MI1RGSnWXBDglFDe1r730ifGsBdI3w8RKnADqV3EPNaViYTRsxdH6Pr1fvIKEdTV:MrSnWXBDglFDe1r730ifGsE3w8RKwq5e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 962a64339feffc1f9f1be75c6e20ebef_JaffaCakes118
Files
-
962a64339feffc1f9f1be75c6e20ebef_JaffaCakes118.exe windows:4 windows x86 arch:x86
1354a90e86c29588576ff7ce6638fd8f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
CreateSemaphoreA
ExitProcess
FindAtomA
GetAtomNameA
GetLastError
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
msvcrt
_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
exit
fflush
fprintf
free
getenv
malloc
memchr
memcpy
memmove
memset
signal
sprintf
strcmp
strlen
system
user32
GetKeyState
wsock32
WSAStartup
closesocket
connect
gethostbyname
htons
inet_addr
recv
send
socket
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE