Static task
static1
Behavioral task
behavioral1
Sample
2e6c5586c834f26c402982a22908e1ad_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2e6c5586c834f26c402982a22908e1ad_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2e6c5586c834f26c402982a22908e1ad_JaffaCakes118
-
Size
250KB
-
MD5
2e6c5586c834f26c402982a22908e1ad
-
SHA1
a10cd57c0413409cf218d5669e99b5b2586ebea7
-
SHA256
dae83617c5379942c32d0b9de7e10468a3efa7749026b4fa0edcc31f5e153d4f
-
SHA512
e60688177006d8a1f9664423e42b4d894720bfcaa37c8174c26f6149b1cace52ed060fc0e4f2b1ab70f59242bd947a799adc76e2d9d5bf5e8db4c98fe69d3079
-
SSDEEP
3072:GIHnXhgBg9tQIHH5v2hH9G7k3sNaERv4DdSQurwmX8weAa:GIHnRW6QI5CHc7LNn1aSQurwnz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e6c5586c834f26c402982a22908e1ad_JaffaCakes118
Files
-
2e6c5586c834f26c402982a22908e1ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
1545e9f88565f1c85a805005b2f75a29
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
FindResourceA
WriteFile
GetCPInfo
OpenFileMappingA
DeleteFileW
ExitProcess
FindFirstFileA
CloseHandle
CreateDirectoryA
HeapFree
ReadFile
CopyFileA
CloseHandle
OpenFileMappingA
GetFileSize
Sleep
HeapAlloc
CreateMutexW
FindNextFileA
FindResourceA
GlobalFree
CreateDirectoryA
CreateMutexA
DeleteFileW
CreateFileA
FindNextVolumeA
GlobalFree
CreateMutexA
GlobalAlloc
GlobalFree
WriteFile
GlobalFree
CopyFileA
ReadFile
AddAtomA
WriteFile
GlobalAlloc
FindNextVolumeA
FindFirstFileA
GetFileTime
GetComputerNameA
OpenFileMappingA
FindNextVolumeA
HeapReAlloc
Sleep
GetComputerNameA
Sleep
GlobalAlloc
GetComputerNameA
CreateMutexA
GlobalFree
WriteFile
GetFileTime
GlobalFree
Sleep
CreateMutexW
HeapReAlloc
GetFileSize
CreateDirectoryA
HeapFree
GetStdHandle
FindFirstFileA
HeapReAlloc
FindNextVolumeA
GetCPInfo
ExitProcess
GlobalFree
FindResourceA
CreateFileA
WriteFile
GetFileTime
FindNextFileA
HeapAlloc
FindNextFileA
DeleteFileW
CopyFileA
CopyFileA
HeapFree
AddAtomA
FindFirstFileA
GlobalFree
CopyFileA
FindNextFileA
GetFileTime
HeapAlloc
CreateMutexW
HeapAlloc
GetFileTime
FindFirstFileA
FindResourceW
FindResourceA
AddAtomA
OpenFileMappingA
FindResourceW
FindResourceW
GlobalFree
FindResourceW
HeapReAlloc
WriteFile
Sleep
FindNextFileA
FindResourceA
GetComputerNameA
CloseHandle
CreateFileA
ExitProcess
DeleteFileW
OpenFileMappingA
FindFirstFileA
DeleteFileW
HeapReAlloc
FindFirstFileA
HeapAlloc
HeapFree
FindFirstFileA
GetFileTime
AddAtomA
GetFileTime
FindResourceW
ExitProcess
GetStdHandle
GlobalAlloc
FindFirstFileA
WriteFile
CreateMutexW
GetFileSize
GetFileTime
CreateMutexA
GetFileSize
GetCPInfo
GetFileSize
CreateMutexW
GlobalFree
ReadFile
FindResourceA
FindNextVolumeA
GlobalFree
HeapAlloc
CloseHandle
FindResourceA
FindResourceA
GetFileSize
GetCPInfo
GetFileTime
HeapReAlloc
CreateDirectoryA
FindFirstFileA
ReadFile
Sleep
CreateMutexA
AddAtomA
FindResourceA
GetFileSize
AddAtomA
FindResourceA
GetCPInfo
FindResourceA
CopyFileA
OpenFileMappingA
CreateFileA
FindResourceW
FindResourceW
GlobalFree
DeleteFileW
WriteFile
GlobalFree
GetCPInfo
DeleteFileA
CloseHandle
FindFirstFileA
FindNextVolumeA
CreateMutexA
WriteFile
GlobalAlloc
OpenFileMappingA
DeleteFileA
OpenFileMappingA
FindNextVolumeA
CreateDirectoryA
GlobalFree
HeapFree
HeapAlloc
CreateMutexW
GlobalFree
CopyFileA
HeapReAlloc
ExitProcess
DeleteFileA
GlobalAlloc
HeapFree
CloseHandle
GlobalFree
Sleep
ReadFile
WriteFile
CreateMutexW
AddAtomA
CopyFileA
CreateDirectoryA
DeleteFileA
GlobalFree
GetCPInfo
GetFileTime
GetFileTime
OpenFileMappingA
GetComputerNameA
CloseHandle
OpenFileMappingA
Sleep
CreateFileA
FindResourceA
GetFileTime
FindNextVolumeA
DeleteFileA
FindResourceW
GetStdHandle
FindFirstFileA
GlobalAlloc
DeleteFileW
GetFileTime
CreateDirectoryA
GlobalAlloc
FindNextFileA
FindNextFileA
GetCPInfo
CreateDirectoryA
Sleep
FindResourceA
GetStdHandle
CloseHandle
GetFileSize
GetFileSize
FindResourceW
GetStdHandle
DeleteFileA
ReadFile
GetComputerNameA
FindResourceA
DeleteFileA
GlobalFree
FindResourceA
ExitProcess
CloseHandle
FindResourceA
HeapAlloc
GlobalFree
HeapAlloc
FindNextFileA
FindFirstFileA
DeleteFileA
CopyFileA
ReadFile
DeleteFileW
CreateMutexW
GlobalFree
HeapReAlloc
DeleteFileA
AddAtomA
CreateMutexW
CloseHandle
GlobalFree
FindResourceW
DeleteFileW
FindResourceW
GetStdHandle
GetFileSize
GetStdHandle
CreateMutexA
ReadFile
GetComputerNameA
CloseHandle
OpenFileMappingA
GetCPInfo
GetStdHandle
GetComputerNameA
GlobalAlloc
Sleep
ReadFile
ExitProcess
AddAtomA
GlobalFree
HeapAlloc
CopyFileA
GetComputerNameA
Sections
code Size: 176KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 105B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ