Static task
static1
Behavioral task
behavioral1
Sample
24b927763e4d52729fe0042feaadb316_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
24b927763e4d52729fe0042feaadb316_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
24b927763e4d52729fe0042feaadb316_JaffaCakes118
-
Size
296KB
-
MD5
24b927763e4d52729fe0042feaadb316
-
SHA1
ba80f6afe7ee760d92e1ab697ea6b53c72796aa5
-
SHA256
8c90da95763772728fda66a4a408e000e6404ae61605d3e3af1645d557ee9e00
-
SHA512
8b851f439523776eb9226ecc45ad5a119099e49107775755db3177f99a35c1d994731511a2a93357fb4f39fe35854899cc2f7f7557ec81841de917c4f7250d7e
-
SSDEEP
6144:hvidxKfRIEeAFGS9J4hQYtb+2MrYEIP7wSFiu8jNE:hvidxKfRIEnz+hTbKMn9A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24b927763e4d52729fe0042feaadb316_JaffaCakes118
Files
-
24b927763e4d52729fe0042feaadb316_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd6f73b81edc1fba13cdc199656d61fc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsW
CopyFileA
GlobalAddAtomW
GlobalSize
GetLocaleInfoA
LocalAlloc
GetCompressedFileSizeW
LoadLibraryExA
EnumSystemCodePagesA
VirtualFree
GetOverlappedResult
ReadConsoleA
QueueUserAPC
VirtualLock
_lopen
ReadDirectoryChangesW
GetCommTimeouts
CreateMailslotA
SetFileApisToOEM
CreateDirectoryExA
GlobalHandle
WriteTapemark
OutputDebugStringW
LocalFree
GetProcAddress
Sleep
GetCommModemStatus
GetCurrentDirectoryA
GetStringTypeExW
GetConsoleTitleA
WaitNamedPipeW
GetFullPathNameA
WriteConsoleOutputAttribute
FormatMessageA
FatalAppExitA
ReleaseSemaphore
WinExec
OpenMutexW
CreateDirectoryA
GetSystemDefaultLCID
WriteProcessMemory
FindFirstFileExW
MulDiv
FillConsoleOutputCharacterA
GlobalLock
FindResourceA
GetThreadPriority
GetExitCodeThread
FlushInstructionCache
SetFileTime
SetEndOfFile
GetDriveTypeW
VirtualQueryEx
SetProcessWorkingSetSize
InterlockedDecrement
GetTimeZoneInformation
FindResourceExA
QueryDosDeviceA
SetPriorityClass
GlobalCompact
GetCommConfig
GetLocalTime
GetEnvironmentStringsW
WriteConsoleOutputW
lstrcpynA
lstrcmpW
EnterCriticalSection
FlushFileBuffers
IsProcessorFeaturePresent
GlobalFindAtomA
DeleteAtom
VirtualProtect
SetThreadIdealProcessor
GetVersionExA
GetFileInformationByHandle
GetNumberFormatW
GetAtomNameW
UnlockFileEx
UpdateResourceA
CreatePipe
UnhandledExceptionFilter
EnumResourceLanguagesW
CreateFileMappingA
OpenFileMappingW
GetDateFormatW
SetTapePosition
SetHandleInformation
LeaveCriticalSection
SetUnhandledExceptionFilter
SetVolumeLabelA
IsBadReadPtr
EnumCalendarInfoW
OpenEventA
QueryDosDeviceW
GetCurrentThread
GetThreadSelectorEntry
GlobalMemoryStatus
GetCommandLineA
SetNamedPipeHandleState
ExitProcess
user32
IsZoomed
EnumDisplaySettingsExA
MsgWaitForMultipleObjectsEx
MapVirtualKeyW
MoveWindow
CreateWindowStationW
SetWindowPlacement
DefDlgProcA
ToUnicodeEx
CharLowerBuffW
GetDialogBaseUnits
PostMessageA
SetActiveWindow
LoadKeyboardLayoutW
RegisterDeviceNotificationW
SystemParametersInfoW
GetClipboardFormatNameA
EnableWindow
GetLastActivePopup
InvalidateRect
MapVirtualKeyA
ReleaseDC
GetProcessDefaultLayout
PeekMessageA
GetMessageA
SwitchToThisWindow
SendNotifyMessageA
SetWindowRgn
SetKeyboardState
IsCharAlphaNumericW
CheckRadioButton
LoadImageA
RegisterClipboardFormatA
CloseWindow
SetMenuItemBitmaps
UnionRect
SetUserObjectSecurity
RegisterWindowMessageW
GetMenuItemID
CreateCaret
GetWindowContextHelpId
GetTabbedTextExtentW
ScrollDC
DrawTextExW
ChangeClipboardChain
SetWindowLongW
HiliteMenuItem
FindWindowA
GetScrollBarInfo
gdi32
SetPolyFillMode
AbortDoc
GetTextAlign
CreateDIBPatternBrushPt
RestoreDC
CreateDiscardableBitmap
PlayEnhMetaFile
comdlg32
ReplaceTextW
ChooseColorA
ChooseFontA
advapi32
RegRestoreKeyW
RegConnectRegistryW
SetSecurityInfo
AbortSystemShutdownA
EnumDependentServicesA
RegDeleteKeyA
CreateProcessAsUserW
AddAccessDeniedAce
LookupAccountNameA
GetUserNameW
RegCreateKeyExW
CryptVerifySignatureA
GetExplicitEntriesFromAclW
InitiateSystemShutdownA
shell32
SHGetFileInfoA
SHAppBarMessage
ExtractIconExW
ole32
CoSetProxyBlanket
RegisterDragDrop
OleSave
OleDraw
oleaut32
VariantChangeType
SysFreeString
GetErrorInfo
VariantChangeTypeEx
LoadTypeLi
SysStringLen
SafeArrayUnaccessData
VariantCopyInd
comctl32
ImageList_GetIconSize
ImageList_DragShowNolock
shlwapi
StrCmpNW
PathFindFileNameW
StrChrIA
StrRStrIW
Sections
.text Size: 280KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE