Static task
static1
Behavioral task
behavioral1
Sample
13133524b213eb52384e8ebc3a544f65_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
13133524b213eb52384e8ebc3a544f65_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
13133524b213eb52384e8ebc3a544f65_JaffaCakes118
-
Size
279KB
-
MD5
13133524b213eb52384e8ebc3a544f65
-
SHA1
70b0fd715a4051734ab5fa6e358b8d6e4e896241
-
SHA256
c5297d45a486c5bb7019006287b07ca16b30dfd775287e218dd7c231a05d2268
-
SHA512
7919334f96f32d65dcd50d5a1e6e82a459d6f7bf90aba1b77b8cb3900cf4b524f81257199028e414e44d7dd6b2f84fc34a051f86fda3f534971e00ca7865ebb3
-
SSDEEP
6144:IQxeHK02yO4TxW2pnd2X0+H6LrzHkw1t++XgdC4fQVuij+Y7qe:Zrt4t3ndxw6rjraDTi9qe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13133524b213eb52384e8ebc3a544f65_JaffaCakes118
Files
-
13133524b213eb52384e8ebc3a544f65_JaffaCakes118.exe windows:4 windows x86 arch:x86
466ee98d02718cd6165167ddb6092a66
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtectEx
CreateDirectoryW
GetCommandLineA
FindClose
GetFileType
ResetEvent
CreateEventW
FindClose
RemoveDirectoryA
CreateFileMappingW
HeapFree
SetEvent
OpenEventA
RemoveDirectoryA
SetLocalTime
SetStdHandle
Sleep
ReleaseMutex
GetModuleHandleA
lstrlenA
CreateMailslotW
FindAtomA
WriteConsoleW
WriteFile
GetLastError
clbcatq
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
cabview
Uninstall
Uninstall
Uninstall
Uninstall
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ