Static task
static1
Behavioral task
behavioral1
Sample
2c077dc86c52bd340f7b2060e4ffd9f8_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
2c077dc86c52bd340f7b2060e4ffd9f8_JaffaCakes118
-
Size
81KB
-
MD5
2c077dc86c52bd340f7b2060e4ffd9f8
-
SHA1
95f11cc92266ce5aeb71a9e4701ddc63d7702cf3
-
SHA256
dcbe2d33c90d2d3f112d28dd36f5064902b565eafce896d36d1c1a2704047258
-
SHA512
5b0f7c91ef0d2842b9fe1960aba51ff42443c142f724f9ecc3177b1dd06805c838ed63cd95f58927e9d133b1ef4ebd2191c109a087021865dee588c04b674c60
-
SSDEEP
1536:QpAh4zdpSXN1wJDmvGg4o/PuMN/PniTekNAR:sAh4P+oAvio/Pu8/PQAR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c077dc86c52bd340f7b2060e4ffd9f8_JaffaCakes118
Files
-
2c077dc86c52bd340f7b2060e4ffd9f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
3d0a470beb24ab4dfaccad3030c42fc0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
HeapFree
GetModuleHandleW
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsSetValue
SetLastError
GetCurrentThreadId
WideCharToMultiByte
RtlUnwind
HeapAlloc
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
SetFilePointer
IsProcessorFeaturePresent
CloseHandle
WriteConsoleW
SetStdHandle
CreateFileW
BeginUpdateResourceW
GetProcAddress
hlink
HlinkCreateShortcut
mcicda
DriverProc
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.OtyDQ Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fT Size: 512B - Virtual size: 478B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.BU Size: 1024B - Virtual size: 754B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qX Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 45KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.H Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mYgUt Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ