Static task
static1
Behavioral task
behavioral1
Sample
a5b298b14cab41bd0d7c03800856072a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a5b298b14cab41bd0d7c03800856072a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a5b298b14cab41bd0d7c03800856072a_JaffaCakes118
-
Size
26KB
-
MD5
a5b298b14cab41bd0d7c03800856072a
-
SHA1
d5ed8c63358c041c674b051f127ef09e10c66637
-
SHA256
95bad986a75e12ad98ef91abc75ae90069be294e254da2072bcb2a7c852c967d
-
SHA512
d1d03ae2408529e210d2689942fcdae1b000eaaf19d6a44d564d355f24b8ffaf8346c52648fd9ab48cdc0c054f03838cdc7b4162b484617a332867728a21f0ee
-
SSDEEP
384:SmvmoyfHUUi0M58kvfingauQH8rki6uCmqyfGEnffyBvJnd1Sv70D62U:SENys306xHOg5QH8hqBEnyNW0D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5b298b14cab41bd0d7c03800856072a_JaffaCakes118
Files
-
a5b298b14cab41bd0d7c03800856072a_JaffaCakes118.exe windows:4 windows x86 arch:x86
029a2ed68fd773b10a828c7d160e6f29
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
bind
WSAStartup
listen
kernel32
CreatePipe
TerminateProcess
ExitProcess
gdi32
SetRelAbs
StretchBlt
SetICMMode
ResetDCW
UpdateColors
SaveDC
TextOutW
SetDIBColorTable
shell32
SHAppBarMessage
StrRChrIW
StrStrIW
Sections
.flat Size: 9KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE