Static task
static1
Behavioral task
behavioral1
Sample
002ccb057d411b59353ef4fb048826d5_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
002ccb057d411b59353ef4fb048826d5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
002ccb057d411b59353ef4fb048826d5_JaffaCakes118
-
Size
297KB
-
MD5
002ccb057d411b59353ef4fb048826d5
-
SHA1
5d223ef338d97acbbe4ad3e9657bd25c668f3723
-
SHA256
da4494ddcbc2e1ffa3c803ca69507a5f35c788dedb73d77c5b333df74052db7e
-
SHA512
386979b307d4fef683a5d3deeefd8d9f254690e6f2a24b89b9ab478d3430381dcad922d1d62d7dc9c7fcf3796f07ba84bd8fef92edfc5a2254af385fe8d50867
-
SSDEEP
6144:OOx39EL4sxDFiyY0OkkzHHTBQlAsBGMlMaFLX6WKFt4s8TTcOcxj:px39ELLDttOkgHHTylNt1FWDqD3cOcxj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 002ccb057d411b59353ef4fb048826d5_JaffaCakes118
Files
-
002ccb057d411b59353ef4fb048826d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
e8dd22d058018b76ae00e5f0e01fee2f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateFileA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetFileSize
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
ReadFile
SetLastError
SetUnhandledExceptionFilter
Sleep
WideCharToMultiByte
msvcrt
_close
_fstat
_lseek
_open
_read
_strdup
_tempnam
_unlink
_write
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_isctype
_lseeki64
_onexit
_pctype
_setjmp
_setmode
_vsnprintf
atexit
calloc
exit
fprintf
fputc
free
fwrite
getenv
localeconv
longjmp
malloc
memchr
memcpy
memmove
memset
perror
printf
signal
sprintf
strcat
strchr
strcmp
strcpy
strerror
strlen
strncmp
strncpy
strrchr
strtoul
vfprintf
wcslen
ws2_32
htonl
ntohl
ntohs
adbwinapi
AdbCloseHandle
AdbCreateInterfaceByName
AdbEnumInterfaces
AdbGetInterfaceName
AdbGetSerialNumber
AdbGetUsbDeviceDescriptor
AdbGetUsbInterfaceDescriptor
AdbNextInterface
AdbOpenDefaultBulkReadEndpoint
AdbOpenDefaultBulkWriteEndpoint
AdbReadEndpointSync
AdbWriteEndpointSync
Sections
.text Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 160KB - Virtual size: 420KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE