Static task
static1
Behavioral task
behavioral1
Sample
24ecef79c0a405ea2edce8fbeb252cc5_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
24ecef79c0a405ea2edce8fbeb252cc5_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
24ecef79c0a405ea2edce8fbeb252cc5_JaffaCakes118
-
Size
292KB
-
MD5
24ecef79c0a405ea2edce8fbeb252cc5
-
SHA1
c7cf54b9d9a590bcb2bf45b9ed9431e0ee1f11b3
-
SHA256
d6ff9f77df2dba3d4f614e8d345c2dab9452af09e4405197b6716ce8ea70bfd1
-
SHA512
db96db22520c95603da9b700c82ab19393a207f4687e8b23acd35ebad52d499af3121184c801b1ec671731a7ed76fd6483a3bd7f9fd884566266d86bc2ca8d6f
-
SSDEEP
6144:R5hLruRvX4yz9WQBiHBOdQfc/K1Lrzj1BBbJGT3eY29cbK+AbA6z:R5h3uRTdcBOCxrzCr2jVlz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24ecef79c0a405ea2edce8fbeb252cc5_JaffaCakes118
Files
-
24ecef79c0a405ea2edce8fbeb252cc5_JaffaCakes118.exe windows:4 windows x86 arch:x86
9f22a2eb95531d11d7594ae1d5be62d7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexW
SetProcessAffinityMask
GetFullPathNameW
ScrollConsoleScreenBufferW
DeleteCriticalSection
GetLongPathNameW
TerminateThread
GetSystemDefaultLangID
OpenMutexA
GetLongPathNameA
CallNamedPipeA
PostQueuedCompletionStatus
GlobalGetAtomNameA
SetConsoleActiveScreenBuffer
MultiByteToWideChar
ReadConsoleOutputAttribute
ClearCommError
FindResourceExW
VirtualQueryEx
FreeEnvironmentStringsA
GetShortPathNameW
HeapReAlloc
GetPrivateProfileIntA
WaitForSingleObject
SetConsoleCursorPosition
EnumResourceNamesW
LoadLibraryW
GetCommState
UnlockFileEx
SetWaitableTimer
GetCompressedFileSizeA
MoveFileA
CreateNamedPipeA
WriteConsoleOutputW
GetFileTime
lstrlenW
EnterCriticalSection
Beep
GetConsoleTitleA
BackupSeek
GlobalSize
SetLastError
EnumSystemCodePagesA
_lcreat
PeekNamedPipe
GlobalHandle
GetLocalTime
CancelWaitableTimer
GetOverlappedResult
GetWindowsDirectoryW
OpenSemaphoreW
FindResourceW
GetFileInformationByHandle
GetProcAddress
RemoveDirectoryA
WriteConsoleOutputCharacterA
GetCompressedFileSizeW
GetLocaleInfoW
LeaveCriticalSection
CompareFileTime
WaitNamedPipeW
GetVersionExA
GetConsoleMode
GetFileSize
GlobalFree
GetOEMCP
Sleep
SetProcessWorkingSetSize
GetCommandLineA
VirtualProtect
WriteConsoleOutputAttribute
ExitProcess
user32
DefMDIChildProcA
IsDlgButtonChecked
GetMenuInfo
GetKeyNameTextW
GetActiveWindow
MsgWaitForMultipleObjects
SetWindowContextHelpId
MapVirtualKeyExW
GetMenuItemInfoW
ShowWindow
PostMessageA
CreateCursor
ChangeDisplaySettingsExA
IsClipboardFormatAvailable
GetClipboardFormatNameA
UnregisterHotKey
RemovePropW
ClientToScreen
UnhookWinEvent
TabbedTextOutA
MapVirtualKeyW
DefFrameProcA
GetQueueStatus
keybd_event
SetWindowPlacement
SetWindowLongW
CopyRect
wsprintfW
GetDlgItemTextW
SendInput
RegisterHotKey
GrayStringA
GetWindowRgn
EnumDisplayMonitors
EnumDesktopsW
DeleteMenu
ChangeClipboardChain
SetScrollInfo
GetDoubleClickTime
CopyAcceleratorTableA
GetNextDlgGroupItem
PostMessageW
GetMessageW
CharUpperW
CreateDesktopA
RegisterWindowMessageA
UnregisterClassW
ShowOwnedPopups
ValidateRect
SetClassLongA
ModifyMenuW
UnregisterDeviceNotification
ShowCursor
IsCharAlphaNumericW
TrackMouseEvent
CreateWindowStationW
SetCursorPos
GetClassLongW
SwapMouseButton
GetShellWindow
MsgWaitForMultipleObjectsEx
GetWindowLongW
SubtractRect
SetWindowWord
EnableMenuItem
DrawFrameControl
gdi32
RealizePalette
GetPolyFillMode
advapi32
RegDeleteValueW
IsValidSecurityDescriptor
SetSecurityInfo
SetSecurityDescriptorGroup
CryptGetProvParam
CryptGenKey
shell32
ExtractAssociatedIconW
SHGetPathFromIDListA
SHAppBarMessage
ExtractIconExA
ole32
CreateGenericComposite
CoResumeClassObjects
CoQueryClientBlanket
CoGetMalloc
oleaut32
SafeArrayPtrOfIndex
SafeArrayRedim
SafeArrayGetElement
DispGetIDsOfNames
SafeArrayCreateVector
shlwapi
UrlApplySchemeW
PathIsUNCServerW
SHSetThreadRef
StrStrA
PathFileExistsW
PathIsDirectoryW
setupapi
SetupDiEnumDriverInfoW
SetupDiCallClassInstaller
SetupDiEnumDeviceInfo
Sections
.text Size: 272KB - Virtual size: 269KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE