Static task
static1
Behavioral task
behavioral1
Sample
MiniShellVentana.html
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
MiniShellVentana.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Release/Minishell_804bytes.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Release/Minishell_804bytes.exe
Resource
win10v2004-20240802-en
General
-
Target
e275e14e75886fcd4294ead4c4c1667b_JaffaCakes118
-
Size
5KB
-
MD5
e275e14e75886fcd4294ead4c4c1667b
-
SHA1
68bfcf11633509befdd960753bba9a89d300d935
-
SHA256
c24879c1a910a3cda9f80e94fd66cb18d753862ab5efbb173718dbd4591c8a19
-
SHA512
40adfcb17aefeb2cfa5e1c6388be9c30b358dd844b9cfe1be7441aab7b2c031534a95a62b4f2c1c7cff39dd68e98b0ac648f5a44db4c99cdce3f939319415279
-
SSDEEP
96:sShE8RfZfkNk3O1W2LbdUyagMfLmur2ODkjmkQ11rpn/ba587G6VfsfhaKE7wFDf:s8Ewa9HEdr2OQjmv1f/baKVcJE7wFDrT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Release/Minishell_804bytes.exe
Files
-
e275e14e75886fcd4294ead4c4c1667b_JaffaCakes118.zip
-
MiniShell.cpp
-
MiniShellVentana.dep
-
MiniShellVentana.dsp
-
MiniShellVentana.dsw
-
MiniShellVentana.mak
-
MiniShellVentana.plg.html
-
Release/Minishell_804bytes.exe.exe windows:4 windows x86 arch:x86
7f28322085e16a68f6263d9e0be87c6e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSASocketA
WSAStartup
bind
listen
accept
kernel32
CreateProcessA
Sections
.Wop Size: 168B - Virtual size: 166B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.aT4 Size: 184B - Virtual size: 182B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.TRK Size: 4B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE