Static task
static1
Behavioral task
behavioral1
Sample
a75ae08c722e557fef246ba6ee44748d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a75ae08c722e557fef246ba6ee44748d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a75ae08c722e557fef246ba6ee44748d_JaffaCakes118
-
Size
176KB
-
MD5
a75ae08c722e557fef246ba6ee44748d
-
SHA1
0fcbb41c79dbca31f6328cd2e3e94599ed858b3c
-
SHA256
179ada1fdb67413d6678cd6f86fc269b42a8207fd50339ae033ca7f1eb196a1e
-
SHA512
786f3e0c8c6e065c86e1da5688f45f776038a56fbae6223552030aac9a666fa71aca99dd32b374a409ec0dd1b6b12727099ad1a29351ff7e382dd6448ace4654
-
SSDEEP
1536:nf0byz+yKJ65TRCJ5h5kd0TbVv79A6RBwiY6ooMz:/z+n6NR05h5keTbVvpI6oou
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a75ae08c722e557fef246ba6ee44748d_JaffaCakes118
Files
-
a75ae08c722e557fef246ba6ee44748d_JaffaCakes118.exe windows:4 windows x86 arch:x86
9eea49ec6f9d1ab1e0fb6a73cbf72804
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
htons
inet_addr
WSAStartup
gethostbyname
socket
connect
send
recv
kernel32
WideCharToMultiByte
CloseHandle
LCMapStringW
LCMapStringA
SetStdHandle
FlushFileBuffers
GetOEMCP
GetACP
GetCPInfo
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
IsBadWritePtr
IsBadReadPtr
HeapValidate
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
GetLastError
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
HeapAlloc
HeapReAlloc
VirtualAlloc
SetConsoleCtrlHandler
SetFilePointer
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
Sections
.text Size: 136KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ