Static task
static1
Behavioral task
behavioral1
Sample
24fdc014b43377e154af1f51cd0c4b02_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
24fdc014b43377e154af1f51cd0c4b02_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
24fdc014b43377e154af1f51cd0c4b02_JaffaCakes118
-
Size
80KB
-
MD5
24fdc014b43377e154af1f51cd0c4b02
-
SHA1
4612c48824ed267629d4889b6e88286878aca4c6
-
SHA256
c7de71ebd236bc7ef41cd43a842b754173dd807ba2d84f0fc582739f261123ee
-
SHA512
0bb3b9577584f7fd72adbc46f86a2ef7b93da768d4764a4e151e88c9ae2e9fff14cd2e58a40f3c8dcca96b5051caa8e05437f9512ea62abaeb8abb3f14dd7eea
-
SSDEEP
768:9wqPoOI10efB86tZf8C/PPbLlg35Lz+uJlOVhrbjg2hd5pRs814COmee26VtW:6qFeB8ER8CHPvlwUhHjg27O5exVY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24fdc014b43377e154af1f51cd0c4b02_JaffaCakes118
Files
-
24fdc014b43377e154af1f51cd0c4b02_JaffaCakes118.exe windows:4 windows x86 arch:x86
88dd33b6606d8812df13deb08a3144c6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
GetTickCount
ResetEvent
GetCurrentDirectoryA
SuspendThread
DeleteFileA
GetFileSize
HeapDestroy
ExitProcess
GetStartupInfoW
AddAtomW
FindClose
HeapCreate
CreateFileA
CreateMutexW
GetSystemInfo
GetTickCount
GetEnvironmentVariableA
ReleaseMutex
InitializeCriticalSection
GetModuleHandleA
FindClose
CloseHandle
HeapSize
SetEndOfFile
wininet
FtpFindFirstFileA
FindCloseUrlCache
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FtpPutFileA
FtpDeleteFileA
HttpQueryInfoA
HttpEndRequestA
FtpOpenFileA
FtpCreateDirectoryA
FtpGetCurrentDirectoryA
FtpGetFileA
DeleteUrlCacheEntryA
perfos
CloseOSObject
CloseOSObject
CloseOSObject
CloseOSObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE