Static task
static1
Behavioral task
behavioral1
Sample
2c3b3193dbc15b8c0c8437dad4bbfeeb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2c3b3193dbc15b8c0c8437dad4bbfeeb_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c3b3193dbc15b8c0c8437dad4bbfeeb_JaffaCakes118
-
Size
268KB
-
MD5
2c3b3193dbc15b8c0c8437dad4bbfeeb
-
SHA1
429f5f0e345ec4eab2eb9d7d3ec86f26de9a2088
-
SHA256
205e5b402a62e0a9a7d56408d687db5767da845b0c7404c9382af8e3daf19f7d
-
SHA512
bae0cb22a54e9a2e88e396fa46636523b172fb18b0b2a5d4adb8f2579f234166225f9e359cd660fe67b8c23023d2431c3175c7af9abb95c9830a8e976a68728c
-
SSDEEP
6144:7EA4hGPlYOaWnMsI1DM66QdugiL1Lyfju7+hq6U+TKxU2nFFe0Npb:77PHM5DMMliL1+yzJxUIe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c3b3193dbc15b8c0c8437dad4bbfeeb_JaffaCakes118
Files
-
2c3b3193dbc15b8c0c8437dad4bbfeeb_JaffaCakes118.exe windows:4 windows x86 arch:x86
6f98b2bd42a0a36fd6d22a904c06322a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
GetMailslotInfo
DuplicateHandle
GetEnvironmentVariableA
GetConsoleCP
user32
SendMessageA
Sections
iToWCtfW Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
tsPORnjj Size: 4KB - Virtual size: 558B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DKmGJbDn Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE