Static task
static1
Behavioral task
behavioral1
Sample
f24074e1393d92483c661b00768dfc67_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f24074e1393d92483c661b00768dfc67_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
f24074e1393d92483c661b00768dfc67_JaffaCakes118
-
Size
274KB
-
MD5
f24074e1393d92483c661b00768dfc67
-
SHA1
8ab5b2513334d385813e49a2805199dcd22557d1
-
SHA256
b657ca881425c85f91bd8b21a61c1743234db6dc15ee7a4d080dd0ad709c1f20
-
SHA512
5cb952630e4dfed98afd2164d05fd22a35475ba1f309290c8d04c9bc8c4bda85dcd1c4f1a0fe2b7715a4cbeba34531065dfa898fa17f4c6bdca0e72e6ef15247
-
SSDEEP
6144:lu0qO0gI48yHKPPLWU9tVYRhJdNVauKU7bs2hT9jE:bqOe8HhGfkJPV1KU7d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f24074e1393d92483c661b00768dfc67_JaffaCakes118
Files
-
f24074e1393d92483c661b00768dfc67_JaffaCakes118.exe windows:4 windows x86 arch:x86
bc0d08ea35752d3623719a120ecc036c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomW
GetCurrentProcessId
IsBadCodePtr
InterlockedIncrement
CloseHandle
LeaveCriticalSection
GetLastError
FlushInstructionCache
GetSystemTimeAsFileTime
DeleteCriticalSection
GetCurrentProcess
InterlockedDecrement
GetStringTypeA
EnumResourceNamesA
IsBadReadPtr
LoadLibraryExA
SetStdHandle
GetModuleHandleA
GetStringTypeW
RegisterWaitForSingleObject
EnterCriticalSection
HeapAlloc
InitializeCriticalSection
GetCurrentThreadId
SetFilePointer
LCMapStringA
FlushFileBuffers
LCMapStringW
RaiseException
SizeofResource
gdi32
CreateFontIndirectA
setupapi
CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
shell32
Shell_NotifyIconA
gdiplus
GdipCreateHBITMAPFromBitmap
GdipCloneImage
Sections
.text Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ