Static task
static1
Behavioral task
behavioral1
Sample
428b97d70698495373613d0b8b07378d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
428b97d70698495373613d0b8b07378d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
428b97d70698495373613d0b8b07378d_JaffaCakes118
-
Size
19KB
-
MD5
428b97d70698495373613d0b8b07378d
-
SHA1
42deff03646191808124ea61d1f8d038cd48d373
-
SHA256
683263321ae3944a8376d36f58881281c0817de7332a437106e2bb5fa1117772
-
SHA512
1d73e31db789894db90196734fdd63cf2fd08f21fa44665d9f69d5ef8610cdc9d0c86476bf7eefcf8026e2a75d4a9416602d0024d76e5d0b615701aa9d4e7fb7
-
SSDEEP
384:DEQOIOblfuqPwad02Vf4T2pkNJD/eT74sIOT+f+aO0zSDeAh9+oZZ:DzOIqIqPwai2VHSl474sx5aZzSS69+yZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 428b97d70698495373613d0b8b07378d_JaffaCakes118
Files
-
428b97d70698495373613d0b8b07378d_JaffaCakes118.exe windows:1 windows x86 arch:x86
1b51dbe324150688ce5e3a0742d34a26
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
accept
htonl
SetServiceA
gethostbyaddr
listen
closesocket
bind
htons
sethostname
urlmon
ZonesReInit
DllCanUnloadNow
IsAsyncMoniker
IsValidURL
URLDownloadW
Extract
CreateAsyncBindCtx
Sections
.text Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE