Static task
static1
Behavioral task
behavioral1
Sample
fac1ac0cb00dee71ebf160c035a554fd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fac1ac0cb00dee71ebf160c035a554fd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fac1ac0cb00dee71ebf160c035a554fd_JaffaCakes118
-
Size
3.5MB
-
MD5
fac1ac0cb00dee71ebf160c035a554fd
-
SHA1
660a5f2a363f0251d505e217c01c94f3cf662b6e
-
SHA256
18e45abd9174aa8b64de0c9452b3abfc7f4a10ffcde1b646ee697bbbe25548af
-
SHA512
7ff61160fd1dce5f5cd9c34f48cd5041d61112a98b682d2bc709a608ae94f29ef9fd38fdb88a677443540f57fe394f99e24769c394d85bb635bcaaee9a83f61c
-
SSDEEP
98304:7rOO53ICLx8eUJF3noxDNL9IW1dXg3S/MHmgH:HD53ICVI32y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fac1ac0cb00dee71ebf160c035a554fd_JaffaCakes118
Files
-
fac1ac0cb00dee71ebf160c035a554fd_JaffaCakes118.exe windows:4 windows x64 arch:x64
0836776cfd75ef804975d0c2a2aa0da0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB Paths
Imports
cygwin1
__cxa_atexit
__errno
__getreent
__main
_dll_crt0
_impure_ptr
calloc
chdir
clock_gettime
close
cygwin_conv_path
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
environ
execvp
exit
fchmod
fcntl
fgetc
forkpty
free
getcwd
getenv
gethostname
getlogin
getpgid
getpgrp
getpid
getppid
ioctl
isatty
kill
localtime
login
malloc
memcpy
open
perror
posix_memalign
printf
ptsname
puts
read
realloc
select
setenv
signal
sleep
sprintf
strchr
strcmp
strcpy
strerror
strlen
strncmp
strrchr
strsignal
strstr
tcgetattr
tcgetpgrp
tcsetattr
time
ttyname
vsnprintf
waitpid
write
kernel32
FreeLibrary
GetCommandLineW
GetConsoleScreenBufferInfo
GetModuleHandleA
GetProcAddress
GetStdHandle
GetTickCount
IsDebuggerPresent
LoadLibraryA
SetConsoleCtrlHandler
WideCharToMultiByte
WriteConsoleA
lstrcpynA
lstrlenW
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.buildid Size: 512B - Virtual size: 53B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 512B - Virtual size: 408B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 544B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE