Static task
static1
Behavioral task
behavioral1
Sample
e19596b4c3b0e0241409734f9ce1fdf4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e19596b4c3b0e0241409734f9ce1fdf4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e19596b4c3b0e0241409734f9ce1fdf4_JaffaCakes118
-
Size
220KB
-
MD5
e19596b4c3b0e0241409734f9ce1fdf4
-
SHA1
4d0a12fd1bf1be4a7db565c385215b30b903f875
-
SHA256
96ad478d7d7803114f09b4a62c4d7a49c3831a47c23adbc2fb01b60ba29bef40
-
SHA512
28e7b09820facc7d9d0d703066ef731c96c66c2634c310dfba8a42a99f5cf33a4d3f47d08849bbc043bf88d263ade286dded0389494c511d6972faca7dac3141
-
SSDEEP
3072:Qmh6Z0X5J810AQP1aLdOEHf4vEU7Pt4/L6d6lgle1crtGY8bQLLO:/hK0p5AQoLdOEHgX7l4+6lYrtGJUW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e19596b4c3b0e0241409734f9ce1fdf4_JaffaCakes118
Files
-
e19596b4c3b0e0241409734f9ce1fdf4_JaffaCakes118.exe windows:4 windows x86 arch:x86
c0fda9cf0bb1346262900118ea7ca1a5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
gethostbyaddr
gethostbyname
inet_ntoa
__WSAFDIsSet
select
send
sendto
socket
bind
closesocket
setsockopt
connect
inet_addr
htonl
WSAGetLastError
WSAStartup
htons
recvfrom
recv
ntohs
ioctlsocket
ntohl
kernel32
GetLastError
SetEndOfFile
InterlockedExchange
RtlUnwind
GetTimeZoneInformation
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetStdHandle
CreateFileA
GetOEMCP
GetACP
VirtualQuery
GetSystemInfo
VirtualProtect
GetCPInfo
GetLocaleInfoA
HeapSize
FlushFileBuffers
FreeConsole
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
GetModuleFileNameA
GetCommandLineA
GetVersionExA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetStringTypeA
GetStringTypeW
WriteFile
CloseHandle
LoadLibraryA
ReadFile
SetFilePointer
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
Sections
.text Size: 168KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE