n:\weo\pazaqr\mtso
Static task
static1
Behavioral task
behavioral1
Sample
24298a70e5fb5ba3b211c8a5487df6cd_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
24298a70e5fb5ba3b211c8a5487df6cd_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
24298a70e5fb5ba3b211c8a5487df6cd_JaffaCakes118
-
Size
1.2MB
-
MD5
24298a70e5fb5ba3b211c8a5487df6cd
-
SHA1
d05348ca2990525e7c9bec03102ac8ea554823eb
-
SHA256
d5936c66d57a99dc4afc131af9e3135cd78627a434936cd3c4433f62bdfc5401
-
SHA512
bead7635473697ad68720258dc4d4e7db019c0df0c57e9eeb06e1796d3fcb693771a46545dce8ed2ef21749800c0052f955a113e2cdddc6c1f412d7d4a2a8c71
-
SSDEEP
24576:aOuNEEyDZag5SlIg2fDyatwBN71HzxXj3rLlC6g:aO+fyKlIg2fDG9TxLrBC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24298a70e5fb5ba3b211c8a5487df6cd_JaffaCakes118
Files
-
24298a70e5fb5ba3b211c8a5487df6cd_JaffaCakes118.exe windows:4 windows x86 arch:x86
443937fa1f71bec84f00e7f93ac1a19e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
MessageBoxIndirectW
ChangeMenuA
GetInputDesktop
TileChildWindows
GetDlgItemTextW
RegisterClassExA
BeginDeferWindowPos
MonitorFromWindow
CreateAcceleratorTableA
GetWindowRect
SetCaretBlinkTime
IsDialogMessageW
DialogBoxIndirectParamW
ToAsciiEx
ChangeDisplaySettingsA
OemKeyScan
RegisterClassA
SetTimer
UnregisterClassA
AdjustWindowRectEx
IsCharAlphaNumericA
DrawTextExW
GetMenuItemRect
AppendMenuA
DdeConnect
IsCharLowerA
DlgDirSelectComboBoxExW
kernel32
UnhandledExceptionFilter
GetStringTypeW
InterlockedExchange
LeaveCriticalSection
HeapReAlloc
SetEnvironmentVariableA
WriteFile
OpenMutexA
GetCurrentThreadId
VirtualAlloc
GetStdHandle
GetModuleHandleA
WriteProfileSectionA
GetModuleFileNameA
ReadFile
IsBadWritePtr
CompareStringA
GetEnvironmentStrings
SetLastError
CloseHandle
TlsSetValue
QueryPerformanceCounter
GetCurrentThread
GetTickCount
FlushFileBuffers
WideCharToMultiByte
GetCurrentProcessId
TlsAlloc
GetFileType
SetFilePointer
HeapCreate
LoadLibraryA
DeleteCriticalSection
GetLastError
FreeEnvironmentStringsW
VirtualQuery
InterlockedDecrement
GetSystemTimeAsFileTime
CompareStringW
OutputDebugStringA
FreeEnvironmentStringsA
SetHandleCount
GetVersion
GetACP
lstrcmpW
HeapAlloc
GetCommandLineA
VirtualFree
TlsGetValue
GetCPInfo
SetStdHandle
InitializeCriticalSection
InterlockedIncrement
GetStartupInfoA
LCMapStringW
GetSystemTime
FreeResource
GetLocalTime
GetCurrentProcess
GetTimeZoneInformation
ExitProcess
HeapDestroy
GetOEMCP
TlsFree
GetProcAddress
GetStringTypeA
MultiByteToWideChar
TerminateProcess
CreateMutexA
RtlUnwind
HeapFree
LCMapStringA
EnterCriticalSection
GetEnvironmentStringsW
comctl32
ImageList_LoadImage
ImageList_SetFlags
ImageList_GetIcon
ImageList_GetImageInfo
InitCommonControlsEx
ImageList_SetIconSize
ImageList_Write
ImageList_GetDragImage
ImageList_GetIconSize
ImageList_SetDragCursorImage
ImageList_LoadImageW
ImageList_SetImageCount
ImageList_Remove
ImageList_Draw
ImageList_Duplicate
ImageList_DragShowNolock
ImageList_Merge
gdi32
GdiGetBatchLimit
SetColorAdjustment
LPtoDP
PolyTextOutA
ExtCreatePen
GetTextColor
PtInRegion
SetDIBits
SelectObject
GetPixelFormat
GetEnhMetaFilePaletteEntries
GetEnhMetaFileDescriptionW
CreateScalableFontResourceA
DeleteEnhMetaFile
UnrealizeObject
SetMiterLimit
DescribePixelFormat
Sections
.text Size: 123KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 243KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 806KB - Virtual size: 800KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ