Static task
static1
Behavioral task
behavioral1
Sample
abe243603f9fccf7e96f173f80fac747_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
abe243603f9fccf7e96f173f80fac747_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
abe243603f9fccf7e96f173f80fac747_JaffaCakes118
-
Size
375KB
-
MD5
abe243603f9fccf7e96f173f80fac747
-
SHA1
dcb0f0b3de280a7b2f8e00c7c5f8348d8df57b7c
-
SHA256
2aeca0fc0bde2d65e908cda0c8a3933e15a7e207177adb4fb66a7d3bc5aa6672
-
SHA512
18ce2bda0bc8a3f3eb4cfe58ed32a7cf018517ddda29c26296125885ce0a77b140b183c64d0078415aac5fe12e702e8cd3f665b77dec47acbd7f4502862f4f14
-
SSDEEP
6144:nFB4N5Q0X4H13yNBnchL3N4XCmwukaUISps3gSsR7Eq:FB4N5eH4ncRNysps3q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abe243603f9fccf7e96f173f80fac747_JaffaCakes118
Files
-
abe243603f9fccf7e96f173f80fac747_JaffaCakes118.exe windows:4 windows x86 arch:x86
0b14620c752db99e472b6a7fa9e8bda3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
cygwin1
__errno
__main
_ctype_
_exit
_fcntl64
_geteuid32
_getuid32
_open64
_stat64
abort
accept
atoi
atol
bind
calloc
close
connect
ctime
cygwin_internal
dll_crt0__FP11per_process
execl
exit
fork
free
gethostbyname
getpid
getppid
getsockname
inet_addr
inet_ntoa
listen
localtime
malloc
memcpy
memset
printf
pthread_atfork
puts
rand
read
realloc
recvfrom
select
sendto
setsid
setsockopt
signal
socket
sprintf
srand
sscanf
strchr
strcmp
strcpy
strlen
strncpy
strpbrk
strstr
time
unlink
usleep
vsprintf
waitpid
write
kernel32
AddAtomA
FindAtomA
GetAtomNameA
GetModuleHandleA
Sections
.text Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 14KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.stab Size: 162KB - Virtual size: 161KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.stabstr Size: 42KB - Virtual size: 42KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ