Static task
static1
Behavioral task
behavioral1
Sample
24f620541f6f32f71a03fd57bf6c99c1_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
24f620541f6f32f71a03fd57bf6c99c1_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
24f620541f6f32f71a03fd57bf6c99c1_JaffaCakes118
-
Size
1.4MB
-
MD5
24f620541f6f32f71a03fd57bf6c99c1
-
SHA1
4d7b789c811ea9a67da70d5633cb442d942a7b10
-
SHA256
ce3706e80b4e680d6668fac5d3a0f9e783d47803c9cc2f7533367f25b367223b
-
SHA512
d696d74466fea82c9c0ef09161eab5f5f6371fd476245669ac9d1ff5d492a35f64d33736c135fb5b479864811174142c6ec6f5b2eacb6ab69335082b4f0ba9c9
-
SSDEEP
24576:iIjSDgTVlf16mZCgXI1fJGPL+XkNQ8Sr7BfoH96hOV+uTGpgQIl:os/CgXI1mLKO96h8TGpgQIl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24f620541f6f32f71a03fd57bf6c99c1_JaffaCakes118
Files
-
24f620541f6f32f71a03fd57bf6c99c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
cd7f0be3df23d06f8ec06a27371500ee
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
IsValidLocale
IsValidCodePage
GetSystemTime
GetStringTypeA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
GetOEMCP
GetTimeZoneInformation
MultiByteToWideChar
SetStdHandle
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
DeleteFileA
GetTempPathA
GetTempFileNameA
GetFileAttributesA
GlobalAlloc
GetShortPathNameA
lstrcmpiA
lstrcpynA
lstrcatA
lstrlenA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetVersionExA
GetACP
GetCPInfo
TerminateProcess
ExitProcess
RaiseException
HeapSize
HeapReAlloc
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
HeapAlloc
HeapFree
Sleep
RtlUnwind
LocalReAlloc
TlsSetValue
TlsGetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SizeofResource
GetProcessVersion
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDiskFreeSpaceA
SetFileTime
GlobalGetAtomNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
LoadLibraryA
GetProcAddress
FreeLibrary
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
SetErrorMode
GlobalAddAtomA
GlobalDeleteAtom
GetCurrentThread
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
SetLastError
WideCharToMultiByte
IsBadCodePtr
InterlockedDecrement
lstrcpyA
GlobalLock
InterlockedIncrement
GetCurrentThreadId
GlobalFlags
GetModuleFileNameA
CreateProcessA
GetLastError
LocalFree
FormatMessageA
GetVersion
GlobalMemoryStatus
GetLocalTime
WriteFile
GetFileTime
SetEndOfFile
GetFileSize
GlobalFree
CloseHandle
SetFilePointer
CreateFileA
MoveFileA
LoadResource
ReadFile
FindResourceA
MulDiv
LockResource
FreeResource
GetLocaleInfoA
GetTickCount
GetUserDefaultLCID
LCMapStringA
lstrcmpA
LCMapStringW
GetFileType
GetStdHandle
GlobalUnlock
GetProfileStringA
user32
SetDlgItemTextA
SystemParametersInfoA
SendDlgItemMessageA
LoadIconA
CheckRadioButton
GetDlgItemInt
AdjustWindowRectEx
MapWindowPoints
IsDlgButtonChecked
IsDialogMessageA
ShowWindow
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
SetDlgItemInt
CharUpperA
wvsprintfA
ShowOwnedPopups
MessageBoxA
LoadStringA
BringWindowToTop
DefFrameProcA
TranslateMDISysAccel
DefMDIChildProcA
RedrawWindow
DestroyMenu
KillTimer
WindowFromPoint
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
CharLowerA
GrayStringA
ValidateRect
GetMessageA
SetMenu
ReuseDDElParam
UnpackDDElParam
DestroyCursor
GetDCEx
LockWindowUpdate
WaitMessage
GetWindowThreadProcessId
DestroyIcon
GetTabbedTextExtentA
SetParent
AppendMenuA
GetSystemMenu
InvertRect
GetScrollRange
GetTopWindow
IsChild
WinHelpA
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetWindowPlacement
GetDlgItem
GetWindowTextLengthA
DefWindowProcA
CreateWindowExA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
SetPropA
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetPropA
RemovePropA
GetMessageTime
SetMessageQueue
DeferWindowPos
RegisterWindowMessageA
EndDialog
IsWindowEnabled
CreateDialogIndirectParamA
DestroyWindow
SetScrollInfo
GetWindowTextA
SetWindowTextA
GetDlgCtrlID
GetWindow
SetTimer
UnionRect
ShowCaret
CreateCaret
IsIconic
GetClassInfoA
RegisterClassA
DestroyCaret
SetActiveWindow
EqualRect
LoadCursorA
DrawFocusRect
SetRectEmpty
IsRectEmpty
SetRect
SetCursor
DrawMenuBar
LoadBitmapA
OffsetRect
CallWindowProcA
GetClassNameA
IntersectRect
EmptyClipboard
SetClipboardData
GetWindowLongA
SetWindowLongA
GetMenu
InsertMenuA
GetMenuStringA
GetMenuItemCount
CheckMenuItem
DeleteMenu
GetQueueStatus
PeekMessageA
PostQuitMessage
TranslateMessage
DispatchMessageA
wsprintfA
TranslateAcceleratorA
FrameRect
FillRect
IsWindow
ShowScrollBar
SetScrollRange
SetScrollPos
UpdateWindow
OpenClipboard
GetFocus
SetCapture
IsWindowVisible
IsZoomed
LoadMenuA
GetSubMenu
EnableMenuItem
CopyRect
SetFocus
RegisterClipboardFormatA
IsClipboardFormatAvailable
GetClipboardData
CloseClipboard
ReleaseCapture
LoadAcceleratorsA
GetSystemMetrics
ClientToScreen
PtInRect
GetCursorPos
GetScrollPos
SendMessageA
EnableWindow
GetNextDlgTabItem
GetScrollInfo
InvalidateRect
ScreenToClient
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetMessagePos
SetWindowPos
GetDesktopWindow
GetClientRect
PostMessageA
InflateRect
GetParent
GetWindowRect
MoveWindow
GetKeyState
EnumChildWindows
GetDC
ReleaseDC
GetSysColor
GetCapture
MessageBeep
GetActiveWindow
HideCaret
CharNextA
DefDlgProcA
UnregisterClassA
ExcludeUpdateRgn
IsWindowUnicode
gdi32
CreatePen
Rectangle
GetObjectA
PatBlt
CreateBitmapIndirect
CreateCompatibleBitmap
GetStockObject
BitBlt
GetTextMetricsA
CreateCompatibleDC
CreateDiscardableBitmap
GetNearestColor
DPtoLP
CreateFontA
CreateFontIndirectA
GetTextExtentPointA
GetNearestPaletteIndex
GetViewportExtEx
LPtoDP
SelectObject
CreateBitmap
SetBkColor
CreatePatternBrush
CreateDIBitmap
StretchDIBits
DeleteObject
SetTextColor
DeleteDC
StartDocA
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
CreateRectRgn
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CombineRgn
SetRectRgn
CreateRectRgnIndirect
CreateDCA
GetViewportOrgEx
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
GetBkColor
GetTextColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetCharWidthA
GetWindowOrgEx
CreateSolidBrush
GetDeviceCaps
comdlg32
GetSaveFileNameA
GetFileTitleA
PrintDlgA
ChooseFontA
CommDlgExtendedError
GetOpenFileNameA
ChooseColorA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
GetFileSecurityA
SetFileSecurityA
RegQueryValueA
RegOpenKeyA
RegCloseKey
RegDeleteKeyA
RegSetValueA
RegCreateKeyA
RegSetValueExA
RegDeleteValueA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
shell32
SHGetFileInfoA
DragAcceptFiles
DragFinish
DragQueryFileA
ExtractIconA
comctl32
ord17
Sections
.text Size: 629KB - Virtual size: 629KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LXMDATA Size: 396KB - Virtual size: 395KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 190KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 76KB - Virtual size: 87KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE