Static task
static1
Behavioral task
behavioral1
Sample
2ccf74a39a1b99f679006ff26c1255f3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ccf74a39a1b99f679006ff26c1255f3_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ccf74a39a1b99f679006ff26c1255f3_JaffaCakes118
-
Size
5.2MB
-
MD5
2ccf74a39a1b99f679006ff26c1255f3
-
SHA1
7c3dbae295abc2313593f08c946fc1d20a625920
-
SHA256
4375a6f61764435bb9fc9d32da84cac819207576efed89aaa765209dfa469bf5
-
SHA512
cbe582ff60baed13d77043f3d6288544a51294035f6b5ebd88d85a6cfe8524f998314a43aa5449f56b603cbb7ee3dcfa1ecee59f45e057e40a6effc868bb2470
-
SSDEEP
768:qOSpAZvo5ewRCAS4sIstteec0dGqWTvBfnuAuHyBPFpU1tx:qObZv3rlyejGqW9fuDHestx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ccf74a39a1b99f679006ff26c1255f3_JaffaCakes118
Files
-
2ccf74a39a1b99f679006ff26c1255f3_JaffaCakes118.exe windows:4 windows x86 arch:x86
a4c3943dad80eabdacff5ca356841a38
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
CreateProcessA
DeleteFileA
Sleep
GetSystemTime
Process32Next
GetCurrentProcessId
OpenProcess
Process32First
CreateToolhelp32Snapshot
ExitProcess
GetWindowsDirectoryA
GetModuleFileNameA
CreateThread
CopyFileA
CreateDirectoryA
GetSystemDirectoryA
ResumeThread
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
MultiByteToWideChar
CreateFileA
FlushFileBuffers
SetStdHandle
SetEnvironmentVariableA
HeapReAlloc
GetTimeZoneInformation
GetLocalTime
GetCommandLineA
GetVersion
HeapFree
GetLastError
WriteFile
ReadFile
TerminateProcess
SetFilePointer
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
VirtualAlloc
user32
FindWindowExA
GetWindowTextA
wsprintfA
shell32
ShellExecuteA
winmm
timeGetTime
ws2_32
gethostname
WSAStartup
gethostbyname
inet_ntoa
rpcrt4
UuidCreateSequential
psapi
GetModuleFileNameExA
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE