Static task
static1
Behavioral task
behavioral1
Sample
2cba0db046026f63b486226f4629788f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2cba0db046026f63b486226f4629788f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2cba0db046026f63b486226f4629788f_JaffaCakes118
-
Size
116KB
-
MD5
2cba0db046026f63b486226f4629788f
-
SHA1
76555c3b0f083d5174f156afb1e7dd1829fe63ad
-
SHA256
f341f9a12b1959c6f7c7054415108d8441a77880eb4835f41ec6c3c397aebfa8
-
SHA512
52cfe372b89517e700703efed4606beab8e8f9892e556249fc14ced153dc1612115bae7395fe14cbb243ab5a83d2809eefe082fdd408b41b53701a4c86c7a021
-
SSDEEP
3072:bcz9uqhnCwsdQz4Jbwu7ByOsgUJDTdfHKWm43H6MYtJ514o38xx/56rUvb:YBuqhCwsdfbwulyOQpmFtd4oMPYrUv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cba0db046026f63b486226f4629788f_JaffaCakes118
Files
-
2cba0db046026f63b486226f4629788f_JaffaCakes118.exe windows:4 windows x86 arch:x86
dc5d8805250cc855b2ebb920729bb160
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
HeapFree
GetCommandLineA
GetVersion
GetLastError
CloseHandle
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetProcAddress
GetModuleHandleA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
HeapSize
FlushFileBuffers
LCMapStringA
LCMapStringW
SetStdHandle
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
LoadLibraryA
GetStringTypeA
GetStringTypeW
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 59KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE