Static task
static1
Behavioral task
behavioral1
Sample
24b72988f23e0b645d37f5be72888aa1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
24b72988f23e0b645d37f5be72888aa1_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
24b72988f23e0b645d37f5be72888aa1_JaffaCakes118
-
Size
835KB
-
MD5
24b72988f23e0b645d37f5be72888aa1
-
SHA1
e42bccf5a32e595a062edf9868f6e03314be1382
-
SHA256
c6ad85ed067a29fc7227f2070574ddc6066b5f470db5c6dfb425ee46bdaed948
-
SHA512
f2e4bb290b54e65beabda4f1d081f69b3ced65860a6ec3daf82615fbb1eb3910587ebb51fe8dc993e90cbf76c69b29c077f418887c6d24890a6c56653521e07d
-
SSDEEP
24576:vhFZP/T6cWa7SgZcwdnGtXOpKFQUwGHela8n:pr3WHcBWXOpKFQUvHelaw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24b72988f23e0b645d37f5be72888aa1_JaffaCakes118
Files
-
24b72988f23e0b645d37f5be72888aa1_JaffaCakes118.exe windows:5 windows x86 arch:x86
51302d967bb278ea2ef8a997cfe29df8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
GlobalSize
SetEvent
GetFileSize
GlobalLock
GetModuleHandleA
GetSystemDirectoryA
GetQueuedCompletionStatus
GetTickCount
SetErrorMode
PostQueuedCompletionStatus
CompareStringA
GetCurrentProcess
GlobalFree
WriteFile
InterlockedIncrement
MoveFileExW
GetLogicalDrives
SetLastError
LocalFree
GetSystemTimeAsFileTime
GetCurrentThreadId
lstrlenA
GetStdHandle
LoadLibraryA
Sleep
EnterCriticalSection
InterlockedExchange
CloseHandle
WaitForSingleObject
GlobalAlloc
LeaveCriticalSection
GetLastError
FlushInstructionCache
GetLocalTime
InitializeCriticalSection
FindClose
DebugBreak
ReadFile
SystemTimeToFileTime
ExitProcess
HeapAlloc
HeapCreate
DeleteCriticalSection
ResetEvent
GetWindowsDirectoryA
GetProcessTimes
SetFilePointer
DeviceIoControl
GlobalUnlock
CreateIoCompletionPort
FreeLibrary
HeapDestroy
GetExitCodeProcess
GetModuleFileNameA
CreateThread
InterlockedDecrement
user32
EmptyClipboard
MonitorFromPoint
GetLastInputInfo
OpenClipboard
ShowWindow
GetDC
KillTimer
GetDoubleClickTime
IsWindow
ReleaseDC
SetForegroundWindow
TranslateMessage
TrackPopupMenu
GetSystemMetrics
GetSubMenu
CloseClipboard
PostQuitMessage
DestroyMenu
SetClipboardData
EnableMenuItem
SetTimer
DestroyWindow
GetCursorPos
gdi32
GetDeviceCaps
advapi32
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueW
RegCloseKey
shell32
SHGetSpecialFolderPathW
SHEmptyRecycleBinW
ole32
CoTaskMemFree
OleUninitialize
CoCreateInstance
CoUninitialize
CoCreateGuid
CoInitialize
OleInitialize
oleaut32
SysFreeString
VariantClear
SysAllocStringLen
VariantInit
SysAllocString
winmm
timeGetTime
waveOutGetNumDevs
iphlpapi
GetAdaptersInfo
secur32
DeleteSecurityContext
Sections
.text Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.textes Size: 213KB - Virtual size: 213KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 283KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 207KB - Virtual size: 5.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 57B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ