Static task
static1
Behavioral task
behavioral1
Sample
24dd5c1bb074283e6c58db89da01bbba_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
24dd5c1bb074283e6c58db89da01bbba_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
24dd5c1bb074283e6c58db89da01bbba_JaffaCakes118
-
Size
388KB
-
MD5
24dd5c1bb074283e6c58db89da01bbba
-
SHA1
0e6580f8517faa3b01eb53b0c22ece17a92aa531
-
SHA256
f8f46bcdd4a9a554c4582f110602e0819663eaa99711a3580ab8df5960c52fb6
-
SHA512
47a13a7f18d9916c0ab7131ea36e2eda0835723ca00639f95d7d19449d4db36d958a1f7b4cbc4e3898273be6d57a55180d28a38cff15ba158fd99920f15af9ae
-
SSDEEP
6144:RNiHtLq3vADj5joq5aiGGXOwyVyTBzvDniTQa3NV8BBFGLjPa:TgW3vKj5jdHG+RDnAbQELra
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24dd5c1bb074283e6c58db89da01bbba_JaffaCakes118
Files
-
24dd5c1bb074283e6c58db89da01bbba_JaffaCakes118.exe windows:4 windows x86 arch:x86
b591978d3f4f73c5d791fa6da174c919
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
GlobalAddAtomA
GetOEMCP
GetCurrentDirectoryW
ReadConsoleOutputA
lstrcmpiW
FindFirstFileExW
_lopen
FlushConsoleInputBuffer
GetVersionExA
GetCommandLineA
VirtualAlloc
FreeLibraryAndExitThread
OpenMutexA
ReadDirectoryChangesW
ExitProcess
EnumResourceNamesW
VirtualQuery
LocalSize
RaiseException
FlushFileBuffers
CreateDirectoryExA
GetCommState
WriteConsoleOutputCharacterA
GetUserDefaultLangID
WaitNamedPipeA
GetOverlappedResult
_llseek
GetModuleHandleA
GetLogicalDriveStringsA
FreeResource
SetEnvironmentVariableW
GetFileAttributesA
WritePrivateProfileStructA
GetStringTypeExW
VirtualProtect
lstrlenA
DeleteCriticalSection
user32
SendDlgItemMessageW
CreateCaret
ShowScrollBar
VkKeyScanA
SetMenuInfo
PeekMessageW
FrameRect
CreateDesktopW
GetUpdateRect
DrawMenuBar
OemToCharBuffW
CallWindowProcA
GetClassInfoW
DestroyCursor
GetDC
GetNextDlgTabItem
UnregisterClassA
LoadStringW
SetParent
RegisterClassA
GetIconInfo
MsgWaitForMultipleObjects
DialogBoxIndirectParamA
CreateIconFromResource
SetDlgItemInt
AppendMenuW
SwapMouseButton
DestroyAcceleratorTable
InternalGetWindowText
HiliteMenuItem
GetFocus
ValidateRect
InsertMenuItemW
GetDCEx
GetClassLongW
SubtractRect
AdjustWindowRect
SetRect
GetUserObjectInformationW
GetCaretPos
TrackPopupMenu
UnloadKeyboardLayout
SetActiveWindow
GetWindowRgn
GetKeyNameTextA
TileWindows
SetUserObjectInformationW
GetDlgCtrlID
GetQueueStatus
InSendMessage
RemovePropW
GetClipboardFormatNameW
RegisterWindowMessageW
GetCaretBlinkTime
wvsprintfW
gdi32
FillRgn
CreateFontIndirectA
GetRgnBox
CreateCompatibleBitmap
AddFontResourceA
CloseEnhMetaFile
SetViewportExtEx
RoundRect
ExcludeClipRect
GdiFlush
RemoveFontResourceA
CreateRectRgnIndirect
CreateDiscardableBitmap
comdlg32
PrintDlgA
FindTextW
advapi32
OpenThreadToken
AbortSystemShutdownW
CryptAcquireContextW
GetExplicitEntriesFromAclW
SetKernelObjectSecurity
NotifyChangeEventLog
GetSecurityDescriptorOwner
EnumServicesStatusA
RegRestoreKeyW
RegOpenKeyExW
BuildSecurityDescriptorW
ReadEventLogW
shell32
SHFileOperationW
SHGetDesktopFolder
SHAddToRecentDocs
ExtractIconExW
Shell_NotifyIconW
SHGetPathFromIDListA
oleaut32
LoadTypeLibEx
SafeArrayPutElement
LoadTypeLi
SafeArrayRedim
SafeArrayUnaccessData
SetErrorInfo
SysAllocStringLen
QueryPathOfRegTypeLi
shlwapi
PathCombineW
PathGetDriveNumberA
UrlCombineW
Sections
.text Size: 332KB - Virtual size: 331KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE