Static task
static1
Behavioral task
behavioral1
Sample
24d2edb4720d8a6c87c33cc7287f7ed9_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
24d2edb4720d8a6c87c33cc7287f7ed9_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
24d2edb4720d8a6c87c33cc7287f7ed9_JaffaCakes118
-
Size
28KB
-
MD5
24d2edb4720d8a6c87c33cc7287f7ed9
-
SHA1
d0fdd50e9affcd690c4ab27739390dc25d524cec
-
SHA256
b222fe3c4bb372a7129833a9af9fd0c3c0d8e205dd29c683d9c514c7fff6aa57
-
SHA512
4841505eee555d0f18cb201e3eed05fddae32551f3bf5af8691d9938aec65bb359039579fab0b7e0f118a4b6286a2dc64c3e19d72871d1bba7a39c54c99ce64f
-
SSDEEP
768:SPCAdrrpTmFqx15CIKx4eNPB8bcSbxg8m5f:SPVdrrpbUbCeNPB3Wxe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24d2edb4720d8a6c87c33cc7287f7ed9_JaffaCakes118
Files
-
24d2edb4720d8a6c87c33cc7287f7ed9_JaffaCakes118.exe windows:4 windows x86 arch:x86
9341e318811969c8ae7e5106bbbe9129
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_ultoa
_ultow
_umask
_ungetch
_ungetwch
_unlink
_unloaddll
_unlock
_utime
_utime64
_vscprintf
_vscwprintf
_vsnprintf
_vsnwprintf
_waccess
_wasctime
_wchdir
_wchmod
_wcmdln
_wcreat
_wcsdup
_wcserror
_wcsicmp
_wcsicoll
_wcslwr
_wcsncoll
_wcsnicmp
_wcsnicoll
_wcsnset
_wcsrev
_wcsset
Sections
.rsrc Size: 21KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NewIT Size: 1024B - Virtual size: 650B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE