Static task
static1
Behavioral task
behavioral1
Sample
2ffa889dd6a0798d6290f245d3a40e07_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2ffa889dd6a0798d6290f245d3a40e07_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2ffa889dd6a0798d6290f245d3a40e07_JaffaCakes118
-
Size
98KB
-
MD5
2ffa889dd6a0798d6290f245d3a40e07
-
SHA1
6202769729190034545b0f7c6c94cff3056bada9
-
SHA256
e34e97abd6669f3e992497cf0d14f159fc72920813d4f183cf70b7d1faef31bf
-
SHA512
7a5efe7bde92a6a7b550c7c92d1c7c13c7f936626b1bf47c3019a66ace9358c06bcaa658df62332cb7da1b8c18e9853f8978f31aeea42c91af7dd8ddad018738
-
SSDEEP
1536:fKhAvz9a93EJByUHP/O9bo014mD/PuVYt0nY69:DpaNQEo0137Pnt0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ffa889dd6a0798d6290f245d3a40e07_JaffaCakes118
Files
-
2ffa889dd6a0798d6290f245d3a40e07_JaffaCakes118.exe windows:5 windows x86 arch:x86
2016309c58ba7553ff7bb2701df05cd0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPriorityClass
OpenFile
FindClose
OpenFileMappingA
GetLocalTime
CopyFileExA
GetCPInfo
DeleteAtom
CopyFileA
DeleteFileW
GlobalFree
AddAtomA
ExitProcess
FindAtomW
GetCommandLineA
WriteFile
GetStdHandle
GetFileTime
CreateDirectoryA
AddAtomW
GetLastError
FindAtomA
ExitThread
CopyFileExW
ReadFile
FreeResource
GetStdHandle
ExitThread
DeleteAtom
OpenFile
CreateDirectoryA
CopyFileA
FlushFileBuffers
GlobalFree
DeleteFileA
FatalExit
CopyFileExA
ReadFile
GetPriorityClass
FindAtomW
OpenFileMappingA
GlobalFree
GetCommandLineA
CopyFileExW
GetLocalTime
WriteFile
CopyFileExA
FreeResource
AddAtomA
GetPriorityClass
FindAtomW
GetLastError
FatalExit
DeleteFileW
ExitProcess
GetCPInfo
Sections
.bg575 Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.f29d Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.a23f Size: 45KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.d42g Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.2cg56 Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 699B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ