Static task
static1
Behavioral task
behavioral1
Sample
server.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
server.exe
Resource
win10v2004-20241007-en
General
-
Target
27eb43157a5ecf4f95d4056fe6e9797c_JaffaCakes118
-
Size
253KB
-
MD5
27eb43157a5ecf4f95d4056fe6e9797c
-
SHA1
b3722453ed96f04526d4253e701b6d86f7d19d19
-
SHA256
962869cbb2de6e4d150d361b0247592f405edee8b81286168f40f6e6d016bb81
-
SHA512
080a766dfa6ed4f975084b862600fb7036525a6d61c9fb97a8788f3c57a5612b0752fc333a7640cfdf5100596f58055c728ecfb1de95bc7bae345f21447fbd05
-
SSDEEP
6144:Thw1MyPzNHkaIF4cr/AQElvzC0DPG/CrbzzQBMhV3XBeH:tw13xH5INrQG8sT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/server.exe
Files
-
27eb43157a5ecf4f95d4056fe6e9797c_JaffaCakes118.cab
-
2zd5.jpg.jpg
-
85A2BC~1.JPG.jpg
-
ENTRY0~1.GIF.jpg
-
server.exe.exe windows:4 windows x86 arch:x86
28c6ef1128d2dc0d513ddf64919b7716
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE