Static task
static1
Behavioral task
behavioral1
Sample
bbe36f72ee151091cfee2b173707e4bb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bbe36f72ee151091cfee2b173707e4bb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bbe36f72ee151091cfee2b173707e4bb_JaffaCakes118
-
Size
49KB
-
MD5
bbe36f72ee151091cfee2b173707e4bb
-
SHA1
31685a0492146f9852f33de65b3a75b33c953829
-
SHA256
c4ef434d90aaf4c53e4e23b9e8886be88d01285736284c3241febcbd59286a97
-
SHA512
b499770f6ebea5bd829cd3973c1b71370b7359b6461a7f46c023a66dd3c8054c0826c1bddc62e5e9d81c5a1a6d4f99dff8806bf37602798a571d3980ea15bfdc
-
SSDEEP
1536:j3P1sZRE4EE0KGzs2vrGbTdpoxsXdTVEjVnnToIf:j3P1sZREtE0Kw6bTd2odpEjVnTBf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbe36f72ee151091cfee2b173707e4bb_JaffaCakes118
Files
-
bbe36f72ee151091cfee2b173707e4bb_JaffaCakes118.exe windows:4 windows x86 arch:x86
c8213f14ed10af86c5a49e7a784a02c9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_onexit
_setmode
_winmajor
abort
atexit
atoi
calloc
exit
fgets
fprintf
fputc
free
fwrite
malloc
memcpy
memset
printf
putchar
puts
setbuf
signal
sprintf
strchr
strerror
strlen
time
vfprintf
ws2_32
WSAGetLastError
WSAStartup
bind
closesocket
gethostbyname
htons
inet_addr
inet_ntoa
ntohs
recvfrom
select
sendto
setsockopt
socket
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 372B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE