time
Static task
static1
Behavioral task
behavioral1
Sample
af4a543efb8e1cd2bf4e93a305c747b6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
af4a543efb8e1cd2bf4e93a305c747b6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
af4a543efb8e1cd2bf4e93a305c747b6_JaffaCakes118
-
Size
60KB
-
MD5
af4a543efb8e1cd2bf4e93a305c747b6
-
SHA1
c9270a156a038e9a4feae1fdeaaf26f8d7965a16
-
SHA256
27fe2e978ff5cc60006d13e26ed00fee1600fa20059e42bb7600ffbdf56c0800
-
SHA512
f46daef4983af5978b3d2ee84cb46c61319003cbeb0cf4c9e82a1bd701f386bd0275c5ab9d022fdaf08716b601ae310f8aa419fa73e504958d80c4d4a37ddd2c
-
SSDEEP
768:gHggGoyxnBIYMUhnbtq/ybUtongXtdT5aXxR7KxiN+8cLjBi+iCej9BVt:gDGxvIchJOoo4hhKxiai/Rx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af4a543efb8e1cd2bf4e93a305c747b6_JaffaCakes118
Files
-
af4a543efb8e1cd2bf4e93a305c747b6_JaffaCakes118.exe windows:4 windows x86 arch:x86
ec35cf55ac2624e4046494688d116d77
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
closesocket
WSAStartup
bind
listen
accept
inet_addr
gethostbyname
socket
setsockopt
htons
recv
connect
WSAGetLastError
shutdown
select
__WSAFDIsSet
send
inet_ntoa
kernel32
DeleteCriticalSection
GetCommandLineA
GlobalAlloc
CreateMutexA
CopyFileA
InitializeCriticalSection
CreateThread
ExitThread
Sleep
WaitForSingleObject
GetVersion
GetCurrentThreadId
GetCurrentThread
GetTickCount
TerminateThread
GetProcessHeap
GetLastError
GetCurrentProcessId
GetCurrentProcess
advapi32
RegCloseKey
RegCreateKeyExA
RegEnumValueA
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
msvcrt
strlen
strcat
rand
realloc
atoi
strchr
strstr
strcpy
_snprintf
free
gmtime
malloc
_time64
_spawnl
sscanf
strncpy
srand
strtok
strrchr
sprintf
exit
_fullpath
_execl
fwrite
fclose
fread
_filelength
fopen
strncmp
isdigit
_strrev
Exports
Exports
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE