Static task
static1
Behavioral task
behavioral1
Sample
14ad2eaa5a409bcdcc2185eaab4e5dfe_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
14ad2eaa5a409bcdcc2185eaab4e5dfe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
14ad2eaa5a409bcdcc2185eaab4e5dfe_JaffaCakes118
-
Size
140KB
-
MD5
14ad2eaa5a409bcdcc2185eaab4e5dfe
-
SHA1
91dd318699e2668b3e9af91a05e560422c47fec5
-
SHA256
e20ab027341797188763f5d0fc4f0d3f5f04fa9ccaac934ddefc5df1bcf0119b
-
SHA512
93b03c2aea9b46ed36fef8478026dd6649b516d391b905424a7ef1e5e270ff2f08d55dab7ee51fa59e83e6a43a53e231ea5f69657818b98003dedbd5e5daedf0
-
SSDEEP
3072:fZZar4uDIMfG/pnScyrnfIyel2mJiGBMiG4q1VHe7KmnmEMhMO/nEc97N:SoMfsnScyEVleGBhoCPnVMT5x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14ad2eaa5a409bcdcc2185eaab4e5dfe_JaffaCakes118
Files
-
14ad2eaa5a409bcdcc2185eaab4e5dfe_JaffaCakes118.exe windows:4 windows x86 arch:x86
0395449f3040082636670b666749edfa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MoveFileA
MoveFileExW
SetFileShortNameW
GetCommandLineW
GetModuleHandleA
GetProcessHeap
HeapFree
HeapReAlloc
HeapAlloc
CreateFileA
ReadFile
GetVersion
CloseHandle
GetStartupInfoA
advapi32
RegOpenKeyExA
RegQueryValueExA
StartServiceCtrlDispatcherA
RegSetValueExA
RegEnumKeyA
RegisterServiceCtrlHandlerA
RegCloseKey
ws2_32
WSAStartup
socket
WSACleanup
send
ioctlsocket
listen
ntohl
recv
inet_addr
select
inet_ntoa
msvcrt
_acmdln
_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_exit
_XcptFilter
exit
__getmainargs
Sections
.text Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 54KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 843B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ