Static task
static1
Behavioral task
behavioral1
Sample
24f85f7835b9c54b735613764802259b_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
24f85f7835b9c54b735613764802259b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
24f85f7835b9c54b735613764802259b_JaffaCakes118
-
Size
93KB
-
MD5
24f85f7835b9c54b735613764802259b
-
SHA1
fba4e34418d18bfaf2d3de02a98e00672a972f5e
-
SHA256
94ccd3dfbffcc8bc99427e4f798896467848c99bd4f866f5bd628d145e074ee5
-
SHA512
c8d04a3f1b1d270af5de12e6514f45ff2d2c53b30c6c15a5c71b75bd030c740ed9fb18dd3eb050e58690f03a695d8204257776841f9c337ef1b814dc75c4dcd0
-
SSDEEP
1536:UW/J3OoVhBgdCNsNqiIGWoIsss56z+4YaOI4H9Hcip2C/M6eV3MTcSh+4j9xz0wF:n/JeEBwqIlIsssgz+4HRwHjp2v6QrS7r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24f85f7835b9c54b735613764802259b_JaffaCakes118
Files
-
24f85f7835b9c54b735613764802259b_JaffaCakes118.exe windows:4 windows x86 arch:x86
76a837d93ec01226ff4b7c042cd567ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
GlobalAlloc
GlobalFree
GlobalLock
GlobalReAlloc
GlobalSize
GlobalUnlock
GetFileSize
MapViewOfFile
ReadFile
RtlZeroMemory
SetEndOfFile
SetFilePointer
UnmapViewOfFile
WriteFile
lstrcpyA
lstrlenA
GetFileAttributesA
ExitProcess
CreateThread
CreateFileMappingA
CloseHandle
CreateFileA
LoadLibraryA
user32
EnumDisplaySettingsA
GetClipboardData
GetCursorPos
GetDlgItem
GetDlgItemTextA
GetWindowRect
GetWindowTextLengthA
IsClipboardFormatAvailable
LoadCursorA
MoveWindow
OpenClipboard
PostMessageA
SendDlgItemMessageA
SendMessageA
SetClassLongA
SetClipboardData
SetClipboardViewer
SetDlgItemTextA
SetFocus
SetTimer
SetWindowLongA
SetWindowPos
EndDialog
EnableWindow
DialogBoxParamA
CloseClipboard
CallWindowProcA
wsprintfA
EmptyClipboard
comctl32
InitCommonControls
comdlg32
GetSaveFileNameA
GetOpenFileNameA
gdi32
CreateFontIndirectA
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 255B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE