e:\skynet\skynet_src.0897b6\Release\skynet0897b6sbf0_18f.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ba71786148315a19a03bda2597f3392d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ba71786148315a19a03bda2597f3392d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ba71786148315a19a03bda2597f3392d_JaffaCakes118
-
Size
1.6MB
-
MD5
ba71786148315a19a03bda2597f3392d
-
SHA1
65d6fdc943ed737e194f945603fe8edc483aa7f9
-
SHA256
871381d94a026dd66a2c4e000a8e0f01370c07b663df0bedbd91759f7e046c30
-
SHA512
9d4f7f05d49142967368f86f1c711730777524a871f63f87a669267838aef303880345be5e4fa764732d49fefff40f3f0c183eaef3fe947976d8312eb4dd9924
-
SSDEEP
24576:Q9eDLXz9xNcWwqQZQSjuPJEtqTnTOYAefoY:Q9eDLXz9xWfqQZQSjRtqTyi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba71786148315a19a03bda2597f3392d_JaffaCakes118
Files
-
ba71786148315a19a03bda2597f3392d_JaffaCakes118.exe windows:4 windows x86 arch:x86
70ff8ba53807a204111013f1b2249ae0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
wsock32
socket
htons
bind
listen
accept
send
recv
ioctlsocket
connect
WSAStartup
setsockopt
WSAGetLastError
sendto
WSACleanup
getsockopt
inet_ntoa
closesocket
ws2_32
WSASocketA
kernel32
GetStartupInfoA
GetTickCount
GetModuleHandleA
DeviceIoControl
CreateFileA
WriteFile
CreatePipe
Sleep
ReadFile
GetProcAddress
CreateThread
LoadLibraryA
FreeLibrary
TerminateThread
CloseHandle
GetLocalTime
SetThreadPriority
SetProcessAffinityMask
GetCurrentProcess
GetCurrentThread
SetPriorityClass
CreateMutexA
WaitForSingleObject
ReleaseMutex
GetLastError
user32
IsIconic
DrawTextA
LoadBitmapA
LoadIconA
LoadCursorA
KillTimer
SetTimer
CreateWindowExA
RegisterClassExA
DispatchMessageA
TranslateMessage
GetMessageA
MessageBoxA
GetClientRect
InvalidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetKeyState
ShowWindow
PostQuitMessage
DefWindowProcA
gdi32
CreateCompatibleDC
Rectangle
SetTextColor
DeleteDC
CreateSolidBrush
CreateFontA
GetTextMetricsA
SetBkMode
SelectObject
GetStockObject
DeleteObject
CreateCompatibleBitmap
BitBlt
shell32
Shell_NotifyIconA
msvcr70
memchr
__dllonexit
_controlfp
__set_app_type
_read
_lseek
_unlink
_close
_write
_open
_mkdir
memset
??0exception@@QAE@ABQBD@Z
?what@exception@@UBEPBDXZ
memcpy
strlen
_callnewh
strncmp
malloc
toupper
atoi
free
_except_handler3
sprintf
exit
perror
printf
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
_cexit
_XcptFilter
_exit
_c_exit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_vsnprintf
_snprintf
??0exception@@QAE@XZ
_CxxThrowException
??3@YAXPAX@Z
memmove
??1exception@@UAE@XZ
__CxxFrameHandler
??0exception@@QAE@ABV0@@Z
_lseeki64
rename
_errno
??_V@YAXPAX@Z
_onexit
Sections
.text Size: 1024KB - Virtual size: 1024KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text1 Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 715KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 120KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 380KB - Virtual size: 377KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 40KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE