Static task
static1
Behavioral task
behavioral1
Sample
1586f00eb9756adf39c8c960f793a347_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1586f00eb9756adf39c8c960f793a347_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1586f00eb9756adf39c8c960f793a347_JaffaCakes118
-
Size
27KB
-
MD5
1586f00eb9756adf39c8c960f793a347
-
SHA1
ff5245c06ff6b2acacbd825bb4ace2a902c61b56
-
SHA256
e760f82b679eceea85a5cd2ac0eddfefd970506be1c05bd3cc11ec002e37ff6a
-
SHA512
cf40ffb01c80f750b142d33a18b79516836e1f8736246972847c1bd098528dc07fa2baac8c39cbf30635dbd1e107737bb6511d9d9c1bee8e9570ff815d3347bd
-
SSDEEP
768:U923+nh5KSya/awwZzpfn1WjLc2IxHUw0mQMGyf:UTnhUlWabnv0jfmH3Gyf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1586f00eb9756adf39c8c960f793a347_JaffaCakes118
Files
-
1586f00eb9756adf39c8c960f793a347_JaffaCakes118.exe windows:4 windows x86 arch:x86
8132cf2b49862b526d830da23f188766
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__errno
__getreent
__main
__progname
_ctype_
_impure_ptr
_lstat64
_open64
_stat64
calloc
close
cygwin_internal
dll_crt0__FP11per_process
exit
fprintf
free
getenv
getopt
getpid
gettimeofday
malloc
memcpy
mkdir
optarg
optind
printf
puts
random
read
realloc
rmdir
srandom
strchr
strcpy
strdup
strerror
strlen
unlink
__progname
__progname
__progname
__progname
__progname
__progname
optarg
optind
kernel32
GetModuleHandleA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 80B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DL5 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE