Static task
static1
Behavioral task
behavioral1
Sample
OC2211.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
OC2211.exe
Resource
win10v2004-20240802-en
General
-
Target
c4252b3cac9fa0a08a98ae4b2ffdca9b_JaffaCakes118
-
Size
387KB
-
MD5
c4252b3cac9fa0a08a98ae4b2ffdca9b
-
SHA1
6fcec2f8224bd6f73e9a54ef1429271e4c77e4e5
-
SHA256
6e1e4c43639edf7e533f22aa67b4fbe57d43f8e66ce607ce61aef631fcc92ab3
-
SHA512
4d221e3d50900c2ed3635d996f8fc6c15a7fab753e022d62ffd0d4c73ce2a948a53c68dfd39b53ef6bcde3d6cec636eacea99be9acf6cc9a28c8bcbc0f382d60
-
SSDEEP
6144:1ampwQUaIxqM40Fg+/I6rgEEVlGs3ZCGMaB59f5ux0t/MD5XcTT0BM7p:wxG0kLhKsZ9MaJ5AenYMd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/OC2211.exe
Files
-
c4252b3cac9fa0a08a98ae4b2ffdca9b_JaffaCakes118.rar
-
OC2211.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 584KB - Virtual size: 584KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ