Static task
static1
Behavioral task
behavioral1
Sample
24f79f42302f1cfeedf100528aaf0f40_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
24f79f42302f1cfeedf100528aaf0f40_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
24f79f42302f1cfeedf100528aaf0f40_JaffaCakes118
-
Size
212KB
-
MD5
24f79f42302f1cfeedf100528aaf0f40
-
SHA1
8da82e789c61b9d5a3fe9f2a8d2bc001cf403f2e
-
SHA256
9d20078a73f71d6a5416c1abe930379437ac4a4ca7163b349d4449d6eaa48ea8
-
SHA512
8b11b26ac5c1d9bd5f6b1344a44572025a1c9447b0ac33221718be0320f13fc37fbfa6fd4eed1ed2f1ba0eab96774a18d40ed2d00c1de68fb989abf864fdc1d2
-
SSDEEP
3072:aaM74bUOTAjzX7UzYJeGqQeYCn2xwD8q1JFFGAXfUCXHSRc+sfqZ:T44b7czU4eyed208qvFsRc+ZZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24f79f42302f1cfeedf100528aaf0f40_JaffaCakes118
Files
-
24f79f42302f1cfeedf100528aaf0f40_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c4846fa03a28c7bdcadc9a6c0ae1f66
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetWriteWatch
SetComputerNameW
GetVolumeNameForVolumeMountPointW
SetNamedPipeHandleState
OpenThread
CallNamedPipeW
WriteFile
GlobalHandle
InitAtomTable
InitializeCriticalSectionAndSpinCount
CommConfigDialogA
SetFileApisToOEM
Process32Next
CompareStringA
VerifyVersionInfoW
lstrcmp
Sleep
FindCloseChangeNotification
SetThreadContext
OpenWaitableTimerW
GetConsoleAliasExesA
GlobalUnfix
GetVolumeInformationW
SetMailslotInfo
SetConsoleCursor
GetComputerNameA
AddAtomA
LoadLibraryW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetACP
CreateFileA
VirtualAlloc
GetCurrentThread
LoadLibraryA
GetProcAddress
GetOEMCP
user32
PostQuitMessage
DefWindowProcA
LoadCursorA
gdi32
DeleteEnhMetaFile
advapi32
RegOpenKeyW
Sections
.text Size: 206KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 772B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data2 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ