Static task
static1
Behavioral task
behavioral1
Sample
2d6df8d1b6ee5debc0fd8b281a636f97_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2d6df8d1b6ee5debc0fd8b281a636f97_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2d6df8d1b6ee5debc0fd8b281a636f97_JaffaCakes118
-
Size
809KB
-
MD5
2d6df8d1b6ee5debc0fd8b281a636f97
-
SHA1
d406c2571f512ee61f337f98a7444023e299c330
-
SHA256
0243c54489f6ca0d07f952088d0b6caf47b76cd22f5ee1978a17e67e711501d7
-
SHA512
c2faaa784c38acaf2a7cf9e43d4990dcc6a9c7a1097c1ceccda4ea2567514d8a74d0412996df8c0c234b478642868873fbc424e8fad94b0d836da8f801fad387
-
SSDEEP
12288:p38/0lL9s/s/10cYjbOYjG5AWqXNJ9LrZEdytHpzTbJNhkIE4fD9tVYk856WYA2h:x88/9GcYjbOBATXPfEduH1fuOA2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d6df8d1b6ee5debc0fd8b281a636f97_JaffaCakes118
Files
-
2d6df8d1b6ee5debc0fd8b281a636f97_JaffaCakes118.exe windows:4 windows x86 arch:x86
af2f95c61f9703fc316f992e8b6e3d86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
VirtualProtect
CreateMutexA
CreateSemaphoreA
GetConsoleTitleA
lstrlenW
GetLastError
MoveFileA
GetLastError
GetLastError
GetFileType
GetCurrentDirectoryW
GetLastError
GetLastError
GetLastError
GetVolumeInformationW
GetLastError
objsel
DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DllUnregisterServer
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.Data Size: 801KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE