_b
Static task
static1
Behavioral task
behavioral1
Sample
24a7500d6e0415e8a5902a851a3ece86_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
24a7500d6e0415e8a5902a851a3ece86_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
24a7500d6e0415e8a5902a851a3ece86_JaffaCakes118
-
Size
162KB
-
MD5
24a7500d6e0415e8a5902a851a3ece86
-
SHA1
b75cf82c9b1225376577374e4d9d7222f040afbb
-
SHA256
5c536378242ba015ee8038194b8776c54bab39c0971f414cf518f86fc774d57a
-
SHA512
462bcdbaf665f957b034f21e2d6dcfd9b6bd8ce8ea64931258683c4cdf4078497c5e81cb2e0f171263760b2333b00836a231bcb0399411eeeeb33690d492f6ff
-
SSDEEP
3072:4IoIhf9dF5fB/w5ywmSdtheVIB7dgf8nmJMo73r7jq:4Ip97ZbwmyhRB7dPmyor7m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24a7500d6e0415e8a5902a851a3ece86_JaffaCakes118
Files
-
24a7500d6e0415e8a5902a851a3ece86_JaffaCakes118.exe windows:4 windows x86 arch:x86
176357b4081be2119b5269f93d35f264
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
advapi32
RegOpenKeyA
RegCreateKeyA
RegQueryValueExA
comctl32
ImageList_Add
ImageList_Create
ImageList_Destroy
ImageList_Read
ImageList_Draw
ImageList_DrawEx
ImageList_DragShowNolock
ImageList_GetBkColor
ImageList_Remove
ImageList_Write
user32
IsWindowEnabled
IsRectEmpty
GetParent
IsWindowUnicode
IsIconic
wsprintfA
oleaut32
OleLoadPicture
SysReAllocStringLen
SysFreeString
ole32
OleCreateStaticFromData
CoGetMalloc
StgOpenStorage
GetHGlobalFromStream
ReleaseStgMedium
comdlg32
GetFileTitleA
FindTextA
ChooseColorA
GetOpenFileNameA
GetSaveFileNameA
kernel32
ExitProcess
VirtualAllocEx
VirtualAlloc
GetLastError
GetFullPathNameA
GetFileType
GetFileAttributesA
GetCommandLineA
GetFileSize
GlobalAlloc
GetEnvironmentStrings
shlwapi
SHQueryValueExA
SHDeleteValueA
Exports
Exports
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tls Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
bbs Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ