Static task
static1
Behavioral task
behavioral1
Sample
24ed4c55f33977493a7140ba8f0ed6ca_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
24ed4c55f33977493a7140ba8f0ed6ca_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
24ed4c55f33977493a7140ba8f0ed6ca_JaffaCakes118
-
Size
288KB
-
MD5
24ed4c55f33977493a7140ba8f0ed6ca
-
SHA1
6c0f70c684647b6e0204e081fecd36037b93c827
-
SHA256
3c2dfa3964a8a4cb9dd3a5e649fbbb01bfb47fe3b502b31fa772204ce997c395
-
SHA512
4a1a86741c942ab62421a019eb0ff956d787777342a9293cec5c476a1be9626662af577423eaefb022b3733d0e6b2e6a9238715b37d31dee4d86fdc93bcc4b50
-
SSDEEP
6144:HWn2eINul3jPdAwhOU7q2+rvGfusWnvKmNnQwQ:222PdbhO1FrufoxNQw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24ed4c55f33977493a7140ba8f0ed6ca_JaffaCakes118
Files
-
24ed4c55f33977493a7140ba8f0ed6ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
1bae8237fe597e82120ad4645c812d18
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageW
SetupComm
GetComputerNameW
GetCurrentProcessId
GetVersion
EnumDateFormatsW
GetEnvironmentStringsW
SetEndOfFile
EnumSystemCodePagesW
VirtualAllocEx
SetProcessShutdownParameters
LoadLibraryExA
ExpandEnvironmentStringsW
SetConsoleMode
WritePrivateProfileSectionW
SetCommTimeouts
IsValidLocale
ReadConsoleOutputA
SetCurrentDirectoryA
GlobalUnlock
FormatMessageA
GetPrivateProfileStringW
MoveFileW
ExitThread
FindFirstFileA
GetModuleHandleA
SizeofResource
ReadConsoleA
SetThreadAffinityMask
_lopen
GlobalAddAtomA
RaiseException
GetOEMCP
PeekNamedPipe
GlobalDeleteAtom
WritePrivateProfileStringA
ConnectNamedPipe
DuplicateHandle
OpenMutexA
VirtualFree
GetCurrentProcess
lstrcatW
GlobalReAlloc
EnumResourceNamesA
LeaveCriticalSection
SetTimeZoneInformation
FindFirstFileW
IsDBCSLeadByteEx
GlobalFree
SetEnvironmentVariableA
DeleteFiber
GetSystemTime
GlobalGetAtomNameW
RemoveDirectoryW
ReadFile
GetCommModemStatus
EnumCalendarInfoA
GetStringTypeExW
LCMapStringA
GetProfileIntA
CloseHandle
lstrlenA
FreeLibrary
VirtualAlloc
GetStartupInfoA
user32
CreateCaret
ValidateRgn
ExcludeUpdateRgn
DeleteMenu
GetWindowDC
ShowCaret
DefMDIChildProcW
IsCharAlphaNumericA
SetPropW
CharPrevW
CheckRadioButton
IsZoomed
SetTimer
SetScrollInfo
LoadStringW
GetWindowTextLengthA
TrackPopupMenuEx
GetCursorPos
EnumDisplayMonitors
CheckMenuItem
CreateDialogParamA
GetMenuStringA
ScrollWindow
DialogBoxIndirectParamA
CharLowerBuffW
EqualRect
LoadBitmapA
DrawTextW
IsClipboardFormatAvailable
FindWindowExW
OpenWindowStationW
SetUserObjectInformationW
GetDCEx
SetMenu
TileWindows
IsCharLowerA
DefFrameProcW
SendDlgItemMessageA
SetWindowsHookW
comdlg32
GetOpenFileNameA
advapi32
RegCreateKeyA
RegCreateKeyExA
CryptGenRandom
ReportEventW
ChangeServiceConfigW
QueryServiceConfigW
QueryServiceObjectSecurity
AddAccessDeniedAce
SetThreadToken
RegCreateKeyExW
CryptHashData
SetNamedSecurityInfoA
SetEntriesInAclW
OpenProcessToken
InitializeSid
UnlockServiceDatabase
CryptAcquireContextW
ReadEventLogW
EnumServicesStatusA
GetSecurityInfo
AccessCheck
shell32
SHLoadInProc
SHChangeNotify
SHGetDesktopFolder
ole32
CreateBindCtx
OleInitialize
CoFreeAllLibraries
GetClassFile
CoMarshalInterface
GetRunningObjectTable
CoRegisterMallocSpy
CoImpersonateClient
oleaut32
SafeArrayUnaccessData
SysAllocStringLen
SysStringLen
LoadTypeLi
comctl32
ImageList_Remove
ImageList_Replace
shlwapi
PathFindExtensionA
PathFileExistsA
PathRemoveExtensionW
PathCommonPrefixW
PathQuoteSpacesW
SHSetValueA
PathGetArgsW
PathRemoveBackslashA
PathCombineA
PathAddBackslashW
PathRemoveFileSpecA
PathIsDirectoryA
PathAppendW
msvcrt
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__setusermatherr
_adjust_fdiv
__p__commode
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 268KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE