Static task
static1
Behavioral task
behavioral1
Sample
4b2ccda1fea90ef65f978b7ebe282085_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4b2ccda1fea90ef65f978b7ebe282085_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b2ccda1fea90ef65f978b7ebe282085_JaffaCakes118
-
Size
371KB
-
MD5
4b2ccda1fea90ef65f978b7ebe282085
-
SHA1
92244b8546c6863950751829da84591b634e2af8
-
SHA256
cc20582e591ae09f64acb60d28710c0f6f631497aba92de869485781ad76323a
-
SHA512
c84328cb1bcba6ef2e9467103212ce94aa1c2875c9573f03716139d5f35af0b6383f46518ac4624b7519d9a606a6d9446bf52f81e19b5ce270b6d96ab6797e9d
-
SSDEEP
6144:WIRM8KP9EoxGcTYNh91DQJ7w6Mcx8MYeWKnEWYzXTz+VNypJOVglH5fDsf1KpXPc:HRM6L9/u5Wcxr8/frTzcNS0G3fDsf1YU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b2ccda1fea90ef65f978b7ebe282085_JaffaCakes118
Files
-
4b2ccda1fea90ef65f978b7ebe282085_JaffaCakes118.exe windows:4 windows x86 arch:x86
e83f5279bf7118c0e002f5608bd8f8db
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
HeapCreate
GetNumberFormatA
GetConsoleAliasA
GetDriveTypeA
CreateEventW
FindAtomA
GlobalFlags
SuspendThread
GetCurrentProcessId
FindClose
GetPrivateProfileStringA
lstrlenW
GetEnvironmentVariableW
TlsGetValue
WriteFile
LocalFree
ResumeThread
GetCurrentThreadId
InitializeCriticalSection
user32
GetClientRect
DispatchMessageA
DrawTextA
EndDialog
GetSysColor
SetFocus
CreateWindowExA
GetKeyboardType
GetSysColor
GetClassInfoA
IsWindow
DrawStateW
CallWindowProcW
resutils
ClusWorkerStart
ClusWorkerStart
ClusWorkerStart
ClusWorkerStart
ClusWorkerStart
clbcatq
DllGetClassObject
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 361KB - Virtual size: 361KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ