Static task
static1
Behavioral task
behavioral1
Sample
2c8af357b4b0f64a1b1c0a10f782461c_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2c8af357b4b0f64a1b1c0a10f782461c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2c8af357b4b0f64a1b1c0a10f782461c_JaffaCakes118
-
Size
249KB
-
MD5
2c8af357b4b0f64a1b1c0a10f782461c
-
SHA1
87347272259bdd138d65e7b658774784d2c66a40
-
SHA256
db2ab5f5969737210005106e560fe8bb0d58518a87fdf0e7bee61cc098c0ce89
-
SHA512
214fc4f8a2390365c6814fb62ba8b0d30ec1c4ec240811f28549322c5d072de7e176f1a859f5bc88ad3809f12dd7e51cb79cdc961d2b7364471aa5100b740f2b
-
SSDEEP
6144:RHaosPOvb27I91wkpzPQ/d45JCxlZd4izCW5rRhg2w:RgPOvb27SJm45OOizCW5Nw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c8af357b4b0f64a1b1c0a10f782461c_JaffaCakes118
Files
-
2c8af357b4b0f64a1b1c0a10f782461c_JaffaCakes118.exe windows:4 windows x86 arch:x86
580ff09269a7b7c3fd7c95527646e901
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoW
GetEnvironmentVariableA
GetCurrentDirectoryA
AddAtomA
ResetEvent
GetModuleHandleA
DeleteFileA
FindClose
GetTickCount
GetSystemInfo
CloseHandle
CreateFileA
ReleaseMutex
WaitForSingleObject
GetTickCount
SuspendThread
CreateMutexW
SetEndOfFile
FindClose
InitializeCriticalSection
GetFileSize
ExitProcess
HeapCreate
HeapSize
HeapDestroy
wininet
HttpQueryInfoA
FtpCreateDirectoryA
FtpGetCurrentDirectoryA
DeleteUrlCacheEntryA
FtpFindFirstFileA
FtpGetFileA
DeleteUrlCacheEntryA
FtpDeleteFileA
HttpEndRequestA
DeleteUrlCacheEntryA
FtpOpenFileA
FtpPutFileA
FindCloseUrlCache
mscpxl32
ConfigureDlgProc
ConfigureDlgProc
ConfigureDlgProc
ConfigureDlgProc
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 243KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ