Static task
static1
Behavioral task
behavioral1
Sample
24bd6173fa215039d51837cf60c0e9e5_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
24bd6173fa215039d51837cf60c0e9e5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
24bd6173fa215039d51837cf60c0e9e5_JaffaCakes118
-
Size
76KB
-
MD5
24bd6173fa215039d51837cf60c0e9e5
-
SHA1
0ee08a93742506219b933063cbd678b00fd65a47
-
SHA256
8d0e04841ba20db9da9ccbf4e704303e5220f354a9948ff94bef47c3519b2902
-
SHA512
25a82eedccc6782da7d72012f0ccc9d748b39621a12666f4565d45420cac731ac05d9b24e4e5a8e3f5205664af35e3cfd4b85bd41ba9a8e227e7b5355baea482
-
SSDEEP
1536:qeKW9r7x9IHTHUxxoy1y6k/LeZLLRDqvlUIOICN2Hp1It:BfjDoaNZtuvlYazIt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24bd6173fa215039d51837cf60c0e9e5_JaffaCakes118
Files
-
24bd6173fa215039d51837cf60c0e9e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
14a2a03ed99465428d08720c06f5b0ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
VirtualAlloc
GetProcAddress
LoadLibraryA
lstrcmpiA
ExitProcess
SetCurrentDirectoryA
WriteConsoleInputW
IsBadReadPtr
LockFile
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
WriteFile
GetCPInfo
GetACP
GetOEMCP
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
MapVirtualKeyW
AnimateWindow
IsCharLowerA
gdi32
EndPath
advapi32
ChangeServiceConfig2A
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE