Static task
static1
Behavioral task
behavioral1
Sample
24d242c5f3ecfd5deb4a295b8226e0d9_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
24d242c5f3ecfd5deb4a295b8226e0d9_JaffaCakes118
-
Size
283KB
-
MD5
24d242c5f3ecfd5deb4a295b8226e0d9
-
SHA1
67d1351067c2b594c0e76eb936e8dba22e31c6b1
-
SHA256
d442091d58ea4d51d6ddb2005f1156266a47e8eaf8455d86f6559c8c24aa00fc
-
SHA512
0bd781adcd4a9bcc71ecd50bd3e28dc9b696857e0440e4a7a08d219a8e297f3713bf8e19c432d66da10f23be5bb54f4e04c6db03c936b08a9ce5dffa7e97438c
-
SSDEEP
6144:131gVflBj0mzQHiqaC4xlVy9TQKDQlwdiVJteR/WX5ZnnvwlPr6Lbpb7wOaV9:1CCaCG5h2AJt7jnolT6Lt7WV9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24d242c5f3ecfd5deb4a295b8226e0d9_JaffaCakes118
Files
-
24d242c5f3ecfd5deb4a295b8226e0d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
12dec5493f54f6c29aa980964264fa5b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsA
GetCPInfo
GetDiskFreeSpaceA
AddAtomA
SetUnhandledExceptionFilter
InitializeCriticalSection
FreeEnvironmentStringsW
CloseHandle
UnhandledExceptionFilter
Sleep
WideCharToMultiByte
GetEnvironmentStringsW
lstrcpynA
MultiByteToWideChar
CreateFileA
EnterCriticalSection
GetProcAddress
SetFilePointer
GetFullPathNameA
GetTickCount
SetStdHandle
GetStringTypeW
GetStringTypeA
EnumResourceNamesW
lstrcpyA
GetThreadLocale
WriteFile
lstrcatA
GetLastError
IsBadReadPtr
GetModuleHandleA
IsBadCodePtr
VirtualProtect
lstrlenW
FindFirstFileA
lstrlenA
GetCurrentThreadId
lstrcmpiA
lstrcmpA
GetStartupInfoA
GetFileAttributesA
LCMapStringW
LoadLibraryA
LCMapStringA
MulDiv
ReadFile
GetEnvironmentStrings
LeaveCriticalSection
GetOEMCP
FreeLibrary
FlushFileBuffers
DeleteCriticalSection
RaiseException
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
Sections
.text Size: 149KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ