Static task
static1
Behavioral task
behavioral1
Sample
f6eb36cbdb4d85b64643fe636f0d2f55_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f6eb36cbdb4d85b64643fe636f0d2f55_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f6eb36cbdb4d85b64643fe636f0d2f55_JaffaCakes118
-
Size
199KB
-
MD5
f6eb36cbdb4d85b64643fe636f0d2f55
-
SHA1
450ae5ef0ce6cee0392a9dbfebdd8e6aead4fe55
-
SHA256
02ad5f42ed4aa9cf4a5bd2ae4183f17db7f4ea1dbd3de6623aaf276dd6dd952c
-
SHA512
1297b525df50de5e9a3474d0456a577caf1f6988c675ef6e4d6361cbc047d0f62ab26bd3f748f74af4d42c4c362db19c72cd424fca26e60620c2042c959aa1e4
-
SSDEEP
3072:An6/HBq3qAdGhS4k5p5pU4T4B+jca8Wz/9DMFIW925pOLA/hmqVvTVLC4HTkweoL:A+Bq3qnop535+Wzmw5pSqpheLweS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6eb36cbdb4d85b64643fe636f0d2f55_JaffaCakes118
Files
-
f6eb36cbdb4d85b64643fe636f0d2f55_JaffaCakes118.exe windows:5 windows x86 arch:x86
4e64c87a7fbfc305c2118d0dda3fbd8c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindAtomA
CreateSemaphoreW
RemoveDirectoryA
GetModuleFileNameA
AddAtomA
CreatePipe
ExitThread
SetVolumeLabelA
CreateDirectoryA
SetEndOfFile
IsBadWritePtr
GetCommandLineA
GetModuleHandleA
HeapCreate
GetDriveTypeW
GetFileType
WriteFile
ClearCommBreak
RemoveDirectoryA
HeapFree
WaitForMultipleObjects
DeleteAtom
CloseHandle
GetProcessHeap
FindClose
clbcatq
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
msvidc32
DriverProc
DriverProc
DriverProc
DriverProc
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE