Static task
static1
Behavioral task
behavioral1
Sample
ab7e407e2a42a2a10810594db1b6dce3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ab7e407e2a42a2a10810594db1b6dce3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ab7e407e2a42a2a10810594db1b6dce3_JaffaCakes118
-
Size
20KB
-
MD5
ab7e407e2a42a2a10810594db1b6dce3
-
SHA1
f4b06ab7cb75e0c00c121523053f785a2e52d937
-
SHA256
a97c93cf1b8179f732e5837d77e5440d5554a26629d9ba1c36e19da377c92b61
-
SHA512
b8fd45e85ff239e5dafa4cf1c3e193136fd51a025d5c2a901056ce19a25fbaad77c04188ccec1359bc05279f94d3ceb821594925baa931b7233d24c7892eb712
-
SSDEEP
192:wIHPECHy7u+++SRmKCe48Cl0gYx9plXRghcs+VX57wZuyGRkxxDQ6:mCHYHHH0Jx9plXKheXtwZuyGRkjQ6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab7e407e2a42a2a10810594db1b6dce3_JaffaCakes118
Files
-
ab7e407e2a42a2a10810594db1b6dce3_JaffaCakes118.exe windows:4 windows x86 arch:x86
37f286df7e6b4c2bf856f9f6a711a72c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
ws2_32
WSACleanup
WSAStartup
closesocket
connect
htons
inet_addr
recv
send
socket
advapi32
RegCloseKey
RegCreateKeyExA
RegSetValueExA
kernel32
AddAtomA
AllocConsole
CopyFileA
CreateMutexA
CreateThread
ExitProcess
FindAtomA
GetAtomNameA
GetComputerNameA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
GetWindowsDirectoryA
GlobalLock
GlobalUnlock
SetFileAttributesA
SetUnhandledExceptionFilter
Sleep
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fflush
fgets
fopen
fprintf
fputc
fread
free
malloc
memset
signal
sprintf
strcmp
strcpy
strlen
strncpy
strstr
strtok
strtol
user32
CloseClipboard
FindWindowA
GetAsyncKeyState
GetClipboardData
GetForegroundWindow
GetWindowTextA
OpenClipboard
ShowWindow
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 5KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE