Static task
static1
Behavioral task
behavioral1
Sample
183e3d70cabeaecdf523985eba1929cd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
183e3d70cabeaecdf523985eba1929cd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
183e3d70cabeaecdf523985eba1929cd_JaffaCakes118
-
Size
24KB
-
MD5
183e3d70cabeaecdf523985eba1929cd
-
SHA1
f0055f29b11735c208742ab9cd4c10dbcd1491b9
-
SHA256
85b3b95a7fa4f47e59c0d06be872becee0a3c26a3fab9b2745ac8328b4ff8d4f
-
SHA512
d694b2c43552924b77345d0bc896d3ae8644792ba9fef66e6a69d101230459a80295ae331afe6a3779c989526e269060e5a390c03fd3f8fbf7e381992355e80a
-
SSDEEP
384:VAmSk7bJaS/4UrbKB+kAct676B4+MVll3ODMpuho+g9Z+B6uU+lrS0n29uzlO3L+:Vqk7bJBFreB+Xct676B4+MV+DMEYr+U2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 183e3d70cabeaecdf523985eba1929cd_JaffaCakes118
Files
-
183e3d70cabeaecdf523985eba1929cd_JaffaCakes118.exe windows:4 windows x86 arch:x86
9e029c18a437c3456e7b3238d643070d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
Extract
CreateAsyncBindCtx
DllCanUnloadNow
IsAsyncMoniker
ZonesReInit
IsValidURL
URLDownloadW
wsock32
accept
bind
htons
sethostname
WSAStartup
htonl
SetServiceA
gethostbyaddr
listen
Sections
.text Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE