Static task
static1
Behavioral task
behavioral1
Sample
24ce2b8c511c9a062d7b01e2badbe706_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
24ce2b8c511c9a062d7b01e2badbe706_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
24ce2b8c511c9a062d7b01e2badbe706_JaffaCakes118
-
Size
596KB
-
MD5
24ce2b8c511c9a062d7b01e2badbe706
-
SHA1
db6a710a2f596951dfbffe4c77dfd214999662b9
-
SHA256
62ca5d863bf1ed3ec11e64a0af31fbdbaa1f3c87dda73e1b303edd4495c0551d
-
SHA512
94e269a85713eb4e0b86c085a6ab90951b9fe4bca464b9542c2e920d5ad7830539562951140adb037d609c07f7223b2e85a8f7737614dde434d1a1bdf42d516f
-
SSDEEP
12288:RRIcewe/hyzRxmmoOJY+UVqJKjNEvfpXPpr7WEr5l1Eep3zk:jIpwchgUmBdUVsKJyRdWk1EeRz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24ce2b8c511c9a062d7b01e2badbe706_JaffaCakes118
Files
-
24ce2b8c511c9a062d7b01e2badbe706_JaffaCakes118.exe windows:4 windows x86 arch:x86
ae1690c43cdb657f5f4443b2bd166c92
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
PeekMessageA
SetWindowLongA
GetDC
ReleaseDC
SetWindowTextA
DestroyWindow
kernel32
GetStartupInfoA
GetCurrentThreadId
Sleep
InterlockedDecrement
FindClose
VirtualFree
TerminateProcess
FreeLibrary
HeapReAlloc
GetACP
GetSystemTimeAsFileTime
CloseHandle
SetUnhandledExceptionFilter
InterlockedExchange
ReadFile
GetModuleHandleA
GetCPInfo
RaiseException
GetSystemInfo
FreeEnvironmentStringsW
MultiByteToWideChar
UnhandledExceptionFilter
CreateThread
GetFileSize
GetCurrentProcess
GetModuleFileNameA
GetVersionExA
HeapDestroy
SetEvent
GetModuleFileNameW
lstrlenA
GetStdHandle
HeapFree
GetLastError
HeapAlloc
GetProcessHeap
VirtualAlloc
GetCommandLineA
GetVersion
ExitProcess
FreeEnvironmentStringsA
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetEnvironmentVariableA
HeapCreate
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetOEMCP
GetProcAddress
LoadLibraryA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedIncrement
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 548KB - Virtual size: 544KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE