Static task
static1
Behavioral task
behavioral1
Sample
2cc0c424bb51d971acb901c7f2a2c390_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2cc0c424bb51d971acb901c7f2a2c390_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2cc0c424bb51d971acb901c7f2a2c390_JaffaCakes118
-
Size
108KB
-
MD5
2cc0c424bb51d971acb901c7f2a2c390
-
SHA1
6de563f32df21195d74c9d293d328017dd184938
-
SHA256
bd3d0c49fcefca2a0be49b74a9eb3a48c0aa41db3ff2a3c60955db51f891855b
-
SHA512
52330c0cb1842a6a6f865cfaeaa2b48ca835696646af31fae13cab527f7e3ccce790c36e4249d40f4210f26681a4ac59211073ac11d8caaddaa79c3d1f0f85aa
-
SSDEEP
3072:rQNk06cONc/YxGQTtkBMq08tZdOqAmcfg:jc/zQRkT/Omc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cc0c424bb51d971acb901c7f2a2c390_JaffaCakes118
Files
-
2cc0c424bb51d971acb901c7f2a2c390_JaffaCakes118.exe windows:4 windows x86 arch:x86
34a20254644dc4ef266055e94122f9af
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
HeapFree
FreeEnvironmentStringsW
LCMapStringA
GetCurrentDirectoryW
TlsSetValue
RtlUnwind
CompareStringW
EnterCriticalSection
HeapReAlloc
GetSystemTimeAsFileTime
HeapDestroy
HeapSize
WriteFile
GetOEMCP
GetTimeZoneInformation
TlsAlloc
GetStringTypeW
FormatMessageA
TerminateProcess
GetStartupInfoA
SetEnvironmentVariableA
SetHandleCount
TlsFree
InitializeCriticalSection
GetExitCodeProcess
GetTickCount
FreeEnvironmentStringsA
HeapCreate
FlushFileBuffers
SetLastError
GetExitCodeThread
LCMapStringW
GetDriveTypeA
QueryPerformanceCounter
ReadFile
GetCommandLineA
TlsGetValue
GetEnvironmentStringsW
CreateFileA
GetLastError
GetProcAddress
MultiByteToWideChar
GetStringTypeA
GetEnvironmentStrings
ExitThread
FreeLibrary
GetFileType
QueryPerformanceFrequency
WideCharToMultiByte
ExitProcess
LocalFree
GetCurrentProcess
SetFilePointer
DeleteCriticalSection
UnhandledExceptionFilter
GetModuleHandleA
LeaveCriticalSection
FindNextFileA
GetLocaleInfoA
GetCPInfo
HeapAlloc
GetModuleFileNameA
GetCurrentThreadId
CompareStringA
GetCurrentDirectoryA
LoadLibraryA
CloseHandle
SetStdHandle
GetACP
WaitForSingleObject
GetStdHandle
GetNumberOfConsoleMouseButtons
GetSystemInfo
GetVersionExA
SetEndOfFile
FindClose
FindFirstFileA
advapi32
RegEnumKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ