Static task
static1
Behavioral task
behavioral1
Sample
56bd6a3108ef92d67b09c0e9201d606a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
56bd6a3108ef92d67b09c0e9201d606a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
56bd6a3108ef92d67b09c0e9201d606a_JaffaCakes118
-
Size
21KB
-
MD5
56bd6a3108ef92d67b09c0e9201d606a
-
SHA1
b0ce618d06a1b2e1b7b1260a189e723d26322f41
-
SHA256
a86ae6bbfae7f4eadb52c1149c06637636b6de2b02fdc1854e1646a75729cdab
-
SHA512
b2525b37eff32403d70d1c3715a7b239d2318d1055576ad69aa32ebc820441ea5629edff1c39facf7869ada8ed94ae85438c3baef977cfe58aec9ce87b39d53b
-
SSDEEP
384:fUQqt2qsZlJeqS9rSgVWdvQvojiggctevdkyVv5GjPWpewBx91fG:/qt2qietHkQvagtRbgWe0fG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56bd6a3108ef92d67b09c0e9201d606a_JaffaCakes118
Files
-
56bd6a3108ef92d67b09c0e9201d606a_JaffaCakes118.exe windows:4 windows x86 arch:x86
513921da81876d14c864aba2d62e56fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__getreent
__main
_impure_ptr
atoi
calloc
ctime
cygwin_internal
dll_crt0__FP11per_process
exit
fprintf
fputc
free
getlogin
getopt_long
getpass
getpwnam
malloc
optarg
optind
printf
puts
realloc
strcasecmp
strcat
strcmp
strcpy
strlen
strrchr
time
vfprintf
kernel32
GetEnvironmentVariableW
GetModuleHandleA
MultiByteToWideChar
netapi32
NetApiBufferFree
NetUserChangePassword
NetUserGetInfo
NetUserModalsGet
NetUserModalsSet
NetUserSetInfo
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 80B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE