Static task
static1
Behavioral task
behavioral1
Sample
2c8c01c8089d1501474c8ad636816f77_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2c8c01c8089d1501474c8ad636816f77_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2c8c01c8089d1501474c8ad636816f77_JaffaCakes118
-
Size
101KB
-
MD5
2c8c01c8089d1501474c8ad636816f77
-
SHA1
f18aa72d038909908c29ddde5733dc4caf3fdf11
-
SHA256
17cbbe6c8a6193151691711c14069931efeae058cb1affe310f496e20eb98227
-
SHA512
c6471f4eafba7caca910f32c5ce60a5c85473df06949235d40c92907409226b8ae7b85aa5f27fa6dcee517173250e5bba1eefd945dfdcafc7b627c0b30074ac7
-
SSDEEP
1536:teX6m0h3KSddj+SEKzQ2TTvjbOcKkT1/bRFv/mEhZl:wXG5j+tGTLbObkTFbTXNhZl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c8c01c8089d1501474c8ad636816f77_JaffaCakes118
Files
-
2c8c01c8089d1501474c8ad636816f77_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
. Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 3KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE