Static task
static1
Behavioral task
behavioral1
Sample
2f08ad9786b927c7a8198479c5598980_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2f08ad9786b927c7a8198479c5598980_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2f08ad9786b927c7a8198479c5598980_JaffaCakes118
-
Size
51KB
-
MD5
2f08ad9786b927c7a8198479c5598980
-
SHA1
0c35e4242436246fde5d013a77b524f6cfcb416d
-
SHA256
413dc1c3dcac34f7606089de941317c96d6230a21e19e12bfb25ad53ae5cb839
-
SHA512
8b69d0bb2397c966a908511131b1bb90de40ef8ebab0cd6b030d25f9143c7bb527c22ec49af5b8346eb7fcced1d66c7cec795954bec06fb0a56eec148261c1e4
-
SSDEEP
768:QHCGogml1A+2tW+FBnfOacXpTX70dBq7/cR9zdxBUOt9J29mM2BvG1Si4GLQPZ9k:uugUAYI3c5sdBqoR9zScS9mSETZ/9Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f08ad9786b927c7a8198479c5598980_JaffaCakes118
Files
-
2f08ad9786b927c7a8198479c5598980_JaffaCakes118.exe windows:4 windows x86 arch:x86
19be69c82f3f5ad5d2b71934c7f191c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ReleaseMutex
GetTickCount
FindClose
CloseHandle
SuspendThread
InitializeCriticalSection
WaitForSingleObject
FindClose
GetFileSize
HeapSize
AddAtomW
CreateMutexW
HeapCreate
GetSystemInfo
GetCurrentDirectoryA
HeapDestroy
GetModuleHandleA
GetTickCount
ExitProcess
CreateFileA
GetStartupInfoW
SetEndOfFile
GetEnvironmentVariableA
ResetEvent
wininet
DeleteUrlCacheEntryA
FtpGetCurrentDirectoryA
FtpPutFileA
FindCloseUrlCache
FtpFindFirstFileA
FtpCreateDirectoryA
FtpGetFileA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
HttpEndRequestA
FtpDeleteFileA
FtpOpenFileA
HttpQueryInfoA
perfos
CloseOSObject
CloseOSObject
CloseOSObject
CloseOSObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ