Static task
static1
Behavioral task
behavioral1
Sample
2ab78f96ef89c102a79e5c7d680007af_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2ab78f96ef89c102a79e5c7d680007af_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2ab78f96ef89c102a79e5c7d680007af_JaffaCakes118
-
Size
28KB
-
MD5
2ab78f96ef89c102a79e5c7d680007af
-
SHA1
3c1f5f88eba08d44b2380a946e7be1bc9c211080
-
SHA256
a7c6e28972e3597c20b4e5d2394f95af94b9bdcc3c5f4fdc5642d8adf704ba52
-
SHA512
90d16e776aebeb23408288340daab4de807c21b8d4048ec7d675495e23f254c48dfd37c6986644d98334150ae1f2683caa822b7b7657920d1a59e2a517e0aec7
-
SSDEEP
384:MKWTjTM++O+lkZrAjCHVMQU8tBM+Tdm/cKAmCks:M/M++O+lExVMQzLH5Q1s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ab78f96ef89c102a79e5c7d680007af_JaffaCakes118
Files
-
2ab78f96ef89c102a79e5c7d680007af_JaffaCakes118.exe windows:4 windows x86 arch:x86
e7525b33f35be8399703aba8d2806205
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
wsock32
WSACleanup
WSAStartup
closesocket
connect
gethostbyname
htons
recv
send
setsockopt
socket
advapi32
RegOpenKeyA
RegSetValueExA
kernel32
AddAtomA
CopyFileA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
SetUnhandledExceptionFilter
Sleep
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_onexit
_setmode
abort
atexit
exit
fclose
fflush
fopen
fprintf
fputc
free
malloc
memset
printf
signal
strcat
strcmp
strcpy
strlen
system
shell32
ShellExecuteA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 176B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE