Static task
static1
Behavioral task
behavioral1
Sample
2951bb86fc4d4c7519504e571ae97e50_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2951bb86fc4d4c7519504e571ae97e50_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2951bb86fc4d4c7519504e571ae97e50_JaffaCakes118
-
Size
22KB
-
MD5
2951bb86fc4d4c7519504e571ae97e50
-
SHA1
53d462032218b11cd0abb5932e3f809354cf4cc2
-
SHA256
c15647cb53f74fcc072121c37f6cca17dca4993b4672869bb13b8fec3ed4e89c
-
SHA512
76fb2aed5f8de986cc2f2c4571d3a1cc858359278cadd22056818ffd4d3fd369e08677e8e384ac9824060d4d72cd967ce1414d79f5ccf84f2f009c799c1de8db
-
SSDEEP
384:axxf1jN+8xzlwhM5VVH87vk/tqHaGF+/4Hnw60TytQ7qh9457wEOEztvNwpOEQP:e1kAl+MVVcI/tqH6Ww6HYCywEOotvNwi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2951bb86fc4d4c7519504e571ae97e50_JaffaCakes118
Files
-
2951bb86fc4d4c7519504e571ae97e50_JaffaCakes118.exe windows:4 windows x86 arch:x86
cb47c37c21898f37897fa4f362acf965
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__errno
__getreent
__main
_fopen64
_lseek64
_open64
_stat64
abort
alarm
calloc
close
cygwin_internal
dll_crt0__FP11per_process
endmntent
exit
fclose
fflush
fgets
fprintf
fputc
fputs
free
fscanf
fsync
fwrite
getmntent
getopt
longjmp
malloc
memalign
optarg
optind
pthread_atfork
random
read
realloc
setbuf
setjmp
setlocale
setmntent
signal
srandom
strcat
strchr
strcmp
strerror
strncpy
strtoul
sysconf
time
unlink
vfprintf
write
cygintl-3
libintl_bindtextdomain
libintl_gettext
libintl_textdomain
kernel32
AddAtomA
FindAtomA
GetAtomNameA
GetModuleHandleA
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE