ClqxHqq
Static task
static1
Behavioral task
behavioral1
Sample
2d457a2235b58b7250ce6c14a0e944d8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d457a2235b58b7250ce6c14a0e944d8_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d457a2235b58b7250ce6c14a0e944d8_JaffaCakes118
-
Size
287KB
-
MD5
2d457a2235b58b7250ce6c14a0e944d8
-
SHA1
c537193bdb848dc902e63f8c03f0e6e901ae07f4
-
SHA256
8028031ada491aaac9b6e38c55ab7e6b707b74e00141f1e032d2355f52819fdd
-
SHA512
fe53ac71ac571d96ff4a75c4c6b909fa8989f94194d9578b964eed3ae7a327fd77f96d833121ae0aca4f834fea0c2797cef5bc6559d6fb074c395014a060e299
-
SSDEEP
3072:Od/1NWE3WzIJszyC8wbVykArR04ON7APXrUQgkxnUep1k/lzusVBeIjORySfeAds:OvNWEG4wbVSON0PXrUBk7Epei3A52z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d457a2235b58b7250ce6c14a0e944d8_JaffaCakes118
Files
-
2d457a2235b58b7250ce6c14a0e944d8_JaffaCakes118.exe windows:5 windows x86 arch:x86
b1ac685894630d6d8ed762434150130e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
QueryDosDeviceW
FatalAppExitA
GetSystemInfo
GetProcAddress
LoadLibraryA
SetConsoleTitleA
SetUserGeoID
CreateMailslotW
GetLastError
GetExitCodeProcess
user32
GetWindowPlacement
EnumDisplayDevicesW
CreateIconIndirect
IsChild
ChangeMenuA
CopyImage
LoadMenuIndirectA
MessageBoxA
gdi32
CloseFigure
GetClipRgn
GetPath
ExtCreateRegion
advapi32
SetFileSecurityA
RegEnumKeyA
AbortSystemShutdownA
QueryServiceLockStatusA
AddAce
Exports
Exports
Sections
.text Size: 230KB - Virtual size: 229KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 457KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ