Static task
static1
Behavioral task
behavioral1
Sample
24c65937889ad2dc375cea54fa3647c6_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
24c65937889ad2dc375cea54fa3647c6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
24c65937889ad2dc375cea54fa3647c6_JaffaCakes118
-
Size
392KB
-
MD5
24c65937889ad2dc375cea54fa3647c6
-
SHA1
021dc08db8f92b4336136e9c5d146d1f9ba9229a
-
SHA256
d1a8080f0213c64c644aa21f3407100fab037add9bb254ec8c33d712feb9b67d
-
SHA512
bc7193b84651b512a26833854c40e41933ceb47a86b2a192793c864596bbd931b1f1e3c91f69364a020d0e26811fd87faf81a88ca9826de6c3e9168c53a28585
-
SSDEEP
6144:/pUkqkFwzgVq767LkLbv1P/AxrvNCBeq0fG5bfAYSR6VbysZk1dWyRr3dT0uEO:/oCJibvNYJbxYYgbRke6Dn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24c65937889ad2dc375cea54fa3647c6_JaffaCakes118
Files
-
24c65937889ad2dc375cea54fa3647c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
3dcd79338126cfbfdd430c4ed2f62311
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
ExitProcess
GetModuleHandleA
GetACP
CreateMutexA
CreateFileA
SetVolumeMountPointA
TlsGetValue
FreeEnvironmentStringsA
HeapCreate
LocalUnlock
LoadLibraryExA
SetLastError
FindClose
GlobalFree
Sleep
HeapDestroy
FreeConsole
UnmapViewOfFile
FindResourceA
user32
CallWindowProcA
DispatchMessageA
IsWindow
FillRect
GetFocus
GetDC
DrawMenuBar
CopyRect
GetDlgItem
DrawEdge
GetIconInfo
CheckRadioButton
DefWindowProcW
uxtheme
DrawThemeText
GetThemeSysInt
DrawThemeIcon
DrawThemeEdge
GetThemeRect
clbcatq
SetupOpen
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ