Static task
static1
Behavioral task
behavioral1
Sample
f16800dea64522d686d88e67c7b02597_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f16800dea64522d686d88e67c7b02597_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f16800dea64522d686d88e67c7b02597_JaffaCakes118
-
Size
133KB
-
MD5
f16800dea64522d686d88e67c7b02597
-
SHA1
69659552cc08c3be06edb77d32bed5828663af96
-
SHA256
cf3582e4dfed8b6439c40755cd42149fe293d8d766a36b1a881ecbad7c62331f
-
SHA512
a20e6ff79c5b687c72c9a0797bce065c3a42ed1df3b33b2bdbe0d50dbf6db624a8f4b0d3287891d92f45ab1ba2c521ffb209852cd5a1c1355bf3ce5446c6dbf5
-
SSDEEP
3072:EqpGB2uBATxmU7JN7hN6co0KFc5kfm3ly5TP6hLeRS:EqpGBR2xmwn7hhmfAlykoRS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f16800dea64522d686d88e67c7b02597_JaffaCakes118
Files
-
f16800dea64522d686d88e67c7b02597_JaffaCakes118.exe windows:4 windows x86 arch:x86
7808ea4aa5301a7b136401792433464e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
ws2_32
getsockname
Sections
.text Size: 89KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 25KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 14KB - Virtual size: 671KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.LION Size: 596B - Virtual size: 164KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE