Static task
static1
Behavioral task
behavioral1
Sample
2c263aebc5babb6bd16d59dd30494830_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2c263aebc5babb6bd16d59dd30494830_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2c263aebc5babb6bd16d59dd30494830_JaffaCakes118
-
Size
54KB
-
MD5
2c263aebc5babb6bd16d59dd30494830
-
SHA1
272cd9ba4e57bbf8c16f65426ecc2d7f2ee0d5b9
-
SHA256
228c4396d4632f09246088902127069ec2c82e0788237f1cb143dce595855b72
-
SHA512
ae048903b9a52a3da616f42e375c7007584bc74914412708566046a8afa3f49308b8c746634937de96ef42dddeff56be11dee2ceb87a1675ac9e04e8f6bbd62b
-
SSDEEP
1536:RaIR8NxVgKb2nsAX1MXWLb+Qlziicqpyy:gZ2sAFMXC3zLcqAy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c263aebc5babb6bd16d59dd30494830_JaffaCakes118
Files
-
2c263aebc5babb6bd16d59dd30494830_JaffaCakes118.exe windows:4 windows x86 arch:x86
c7228fa01d2493db2cec7a17804ac823
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mssign32
DllRegisterServer
DllUnregisterServer
FreeCryptProvFromCert
GetCryptProvFromCert
PvkFreeCryptProv
DllRegisterServer
DllUnregisterServer
FreeCryptProvFromCert
GetCryptProvFromCert
PvkFreeCryptProv
DllRegisterServer
DllRegisterServer
DllRegisterServer
kernel32
VirtualAlloc
GetSystemDirectoryA
TlsFree
GetDiskFreeSpaceW
CreateFileA
GetSystemInfo
ReadFile
GetACP
TlsFree
TlsFree
ReplaceFileA
IsProcessInJob
GlobalFree
DeleteAtom
CreatePipe
DuplicateHandle
EncodePointer
GlobalFree
DeleteAtom
EnterCriticalSection
FreeLibrary
GetThreadLocale
FindNextFileA
GetModuleHandleW
GetFileTime
SetComputerNameW
LockFileEx
ExitProcess
AllocConsole
GetThreadTimes
ReleaseMutex
HeapWalk
LCMapStringW
IsValidLocale
odbc32
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
Sections
.text Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE