Static task
static1
Behavioral task
behavioral1
Sample
9aaf16b3844fb39b4dc0693efe87431c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9aaf16b3844fb39b4dc0693efe87431c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
9aaf16b3844fb39b4dc0693efe87431c_JaffaCakes118
-
Size
132KB
-
MD5
9aaf16b3844fb39b4dc0693efe87431c
-
SHA1
8e175a0b515bfdbed9134d935c3d484172dcd830
-
SHA256
e97a621304d7dc32e8dba02a1db38c2b0eaac1d61ab6e4a0d118247519ea0e0b
-
SHA512
3c6bcd669e883009145464c3a8adf012ff1361d04b87f82d1af7aabf1f2e50384959413dd4bdc5de0b27acaac5c4b5feacd68fea75595d62317385cddb7e9d17
-
SSDEEP
3072:6qpGB2uBATxmU7JN7hN6co0KFc5kfm3ly5TP6hLe:6qpGBR2xmwn7hhmfAlyko
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9aaf16b3844fb39b4dc0693efe87431c_JaffaCakes118
Files
-
9aaf16b3844fb39b4dc0693efe87431c_JaffaCakes118.exe windows:4 windows x86 arch:x86
7808ea4aa5301a7b136401792433464e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
ws2_32
getsockname
Sections
.text Size: 89KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 25KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 14KB - Virtual size: 671KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.LION Size: 596B - Virtual size: 164KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE