Static task
static1
Behavioral task
behavioral1
Sample
2cc1ac0791919d6e6abec78591d10a4e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2cc1ac0791919d6e6abec78591d10a4e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2cc1ac0791919d6e6abec78591d10a4e_JaffaCakes118
-
Size
959KB
-
MD5
2cc1ac0791919d6e6abec78591d10a4e
-
SHA1
2c74d2c26b2079c72ac9360ab8c6a6e298efcc77
-
SHA256
afd7bcc710b34feed24696da4342af895d542ed3cd3ecd3f9560bec08c64645a
-
SHA512
36140439502ad5d15db68db4e3c6394b066ca91cbef05d32fb89bcdcb75ecd42647009be7236701dacdc98ef7a84a5bf7d27417683dfd927874facf9f0bd550c
-
SSDEEP
24576:UZiN4YY3OCqfwGcoH12owbTQQmXcmmek8Ewrf:UrDeFfwGbH12ZFmMTek8j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cc1ac0791919d6e6abec78591d10a4e_JaffaCakes118
Files
-
2cc1ac0791919d6e6abec78591d10a4e_JaffaCakes118.exe windows:4 windows x86 arch:x86
b3082620fcaaff56ea0144da2aed839e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
ExitProcess
LocalAlloc
LocalFree
CreateFileA
SetFilePointer
CloseHandle
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
WriteFile
DeleteFileA
CreateDirectoryA
GetTempPathA
GetSystemDirectoryA
GetWindowsDirectoryA
WinExec
lstrcpyA
lstrcpynA
lstrcatA
lstrlenA
user32
MessageBoxA
shell32
ShellExecuteA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
Sections
Size: 478KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 348KB - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Jason Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE