Static task
static1
Behavioral task
behavioral1
Sample
24e08cc595cf9d3d9a78c502a62483e0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
24e08cc595cf9d3d9a78c502a62483e0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
24e08cc595cf9d3d9a78c502a62483e0_JaffaCakes118
-
Size
122KB
-
MD5
24e08cc595cf9d3d9a78c502a62483e0
-
SHA1
80f491e769967e165c4d6bc3c0827292d5084594
-
SHA256
d890f226aa541675f26e8131d12f586fcf39019820e5d08c96689fd173a981a6
-
SHA512
03733e5b59c694d22812c415a3c399b8fd5ec84a9fc24f8978bf32e675d2cf30bd69b7b11b6ef543c3f3dc50abd84556167aa447b886c9ca7c20558c560fa89e
-
SSDEEP
3072:I4yBq7mQwfPpz2S3xv9noIPOf7ICcIVI:IE7Sh6Gx1oISItL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24e08cc595cf9d3d9a78c502a62483e0_JaffaCakes118
Files
-
24e08cc595cf9d3d9a78c502a62483e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
911d50972394c0f39a26a0fdaf637612
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
CreateFileA
SetLastError
lstrcmpiW
GetModuleHandleA
GetCommandLineW
GetComputerNameA
HeapCreate
GetTickCount
SetEvent
CloseHandle
LocalFree
GetDiskFreeSpaceW
LoadLibraryW
ReleaseMutex
GetSystemTime
GetFileAttributesW
ResumeThread
ResetEvent
FindAtomW
user32
CreateWindowExA
FillRect
DrawStateA
GetClassInfoA
GetKeyState
CloseWindow
DestroyCaret
GetClipCursor
DispatchMessageA
SetFocus
GetDlgItem
GetComboBoxInfo
CallWindowProcA
MessageBoxA
cryptdlg
CertTrustCertPolicy
CertTrustInit
CertTrustFinalPolicy
CertConfigureTrustA
DecodeRecipientID
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 109KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mohxnia Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE