Static task
static1
Behavioral task
behavioral1
Sample
2950d1a6026dc7572c414570eb7850b1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2950d1a6026dc7572c414570eb7850b1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2950d1a6026dc7572c414570eb7850b1_JaffaCakes118
-
Size
112KB
-
MD5
2950d1a6026dc7572c414570eb7850b1
-
SHA1
a010ae2f4a1db6989001d7c83784a6a1ab2dbb00
-
SHA256
09a7702f29de394fe0a097e0896fda8d1cb4f1e1a7f6f5a0d32af67f77b6ac35
-
SHA512
74390cd2a03c369509494e9552ed23259fd0c976c51baacdfc1c8f88020012e181f422bff8ffa47627f84bf3bffa105a58ccf2e2e2bf99ee8356159d5d6018f2
-
SSDEEP
768:1FQ31uSyZ739lAzebARfo9EcbQLlIgP2Be4KlM19lr5s1AkEHdZ94oA6vaB3NoI1:3IjyZwzerxM7P26lclr5s1LE+N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2950d1a6026dc7572c414570eb7850b1_JaffaCakes118
Files
-
2950d1a6026dc7572c414570eb7850b1_JaffaCakes118.exe windows:5 windows x86 arch:x86
85c159b3a6656615855f25119fb865d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
GetCommandLineA
DeleteFileA
CompareStringA
GetLocalTime
CreateDirectoryA
FlushFileBuffers
GetStdHandle
GetPriorityClass
GetCPInfo
lstrlenA
ExitThread
ExitProcess
ReadFile
CopyFileExA
GetLastError
lstrcmpA
FormatMessageA
HeapAlloc
DeleteFileW
GetFileTime
user32
DrawIconEx
CopyRect
GetScrollPos
IsMenu
GetDC
advapi32
RegCreateKeyExW
RegFlushKey
RegQueryInfoKeyW
RegOpenKeyA
RegQueryInfoKeyA
RegDeleteKeyA
RegEnumValueW
Sections
.gf28g Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ebbg Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.e6eed Size: 54KB - Virtual size: 349KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.442a4 Size: 1024B - Virtual size: 885B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ