Static task
static1
Behavioral task
behavioral1
Sample
123c503b9c22be4f09b43dfa8a74e03b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
123c503b9c22be4f09b43dfa8a74e03b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
123c503b9c22be4f09b43dfa8a74e03b_JaffaCakes118
-
Size
6KB
-
MD5
123c503b9c22be4f09b43dfa8a74e03b
-
SHA1
4355783e0a35d391bda7c223c4a936956f044d85
-
SHA256
7dd6226d892cdb0e4b8b033c4b543f3817894b60b5abbd7ff329e1070329b6cc
-
SHA512
5f255391d7ab9507b6627685b7a4b24023a4dc43b2d294703e9ac77abae733a10619ed171df24d53cce258c3f92d714146f18ab2288986086576781c1c48dfcc
-
SSDEEP
96:3+DWL2nECPBtePjA5Zq13RB9SGObyxIEWFcRaXKt26KZF/3:OBhaYq13j9TEMIEWq+Kt2bF/3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 123c503b9c22be4f09b43dfa8a74e03b_JaffaCakes118
Files
-
123c503b9c22be4f09b43dfa8a74e03b_JaffaCakes118.exe windows:4 windows x86 arch:x86
8132cf2b49862b526d830da23f188766
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__errno
__getreent
__main
__progname
_ctype_
_impure_ptr
_lstat64
_open64
_stat64
calloc
close
cygwin_internal
dll_crt0__FP11per_process
exit
fprintf
free
getenv
getopt
getpid
gettimeofday
malloc
memcpy
mkdir
optarg
optind
printf
puts
random
read
realloc
rmdir
srandom
strchr
strcpy
strdup
strerror
strlen
unlink
__progname
__progname
__progname
__progname
__progname
__progname
optarg
optind
kernel32
GetModuleHandleA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 80B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE