Static task
static1
Behavioral task
behavioral1
Sample
2fc9f98fdeee15f1c3de6027443d5316_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2fc9f98fdeee15f1c3de6027443d5316_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2fc9f98fdeee15f1c3de6027443d5316_JaffaCakes118
-
Size
333KB
-
MD5
2fc9f98fdeee15f1c3de6027443d5316
-
SHA1
6c45f031ffda4c0639b3bbfa07fd1ea2357bfcaa
-
SHA256
1cbffa633705960da18b982b75909d71fe0e48b5a5f92d98eade8a10194b6c96
-
SHA512
e46be52d9d5c3cc86fe6bbf1e201e136f34dc33f95009d8486cf541e3161de50a450e73a8229e9a79e640a41332b379036dea8b815d6c748614984da480a85af
-
SSDEEP
6144:5VHoH8C6svM64yFTL376JAHkPW7E/1hCdN/6q+qn7UHbLxkXVZV:5VSWsvMjyFTLLje/LCdN/QqnoHxklZV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fc9f98fdeee15f1c3de6027443d5316_JaffaCakes118
Files
-
2fc9f98fdeee15f1c3de6027443d5316_JaffaCakes118.exe windows:4 windows x86 arch:x86
1f9b9649c412a8433a01f81131fb42a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
GetSystemDefaultLCID
CreateSemaphoreA
GetProcAddress
LocalHandle
LocalFree
LocalLock
GetACP
GetLastError
VirtualAlloc
TlsGetValue
LocalReAlloc
TlsSetValue
GetModuleHandleA
GetStartupInfoA
secur32
FreeCredentialsHandle
QueryCredentialsAttributesA
InitializeSecurityContextA
ApplyControlToken
DecryptMessage
DeleteSecurityContext
MakeSignature
EncryptMessage
ExportSecurityContext
AcceptSecurityContext
CompleteAuthToken
netapi32
NetGetJoinableOUs
NetGroupAdd
NetGetJoinInformation
NetAuditClear
NetGroupAddUser
NetFileClose
NetGetDCName
Netbios
NetAuditWrite
NetConfigGetAll
msvcrt
_initterm
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_acmdln
__setusermatherr
exit
__getmainargs
_XcptFilter
_exit
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 312KB - Virtual size: 311KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ