Static task
static1
Behavioral task
behavioral1
Sample
f59c9e5ee63932cf8203e5e535edecc7_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f59c9e5ee63932cf8203e5e535edecc7_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f59c9e5ee63932cf8203e5e535edecc7_JaffaCakes118
-
Size
80KB
-
MD5
f59c9e5ee63932cf8203e5e535edecc7
-
SHA1
f5752c0e9ed941f963efb6b7ad218722699d3edb
-
SHA256
ebfe4bce17984cfbb6a29f43c711c8593a9f06b372ccd68e6032000d8876a189
-
SHA512
52a21cf4013ea74fc0b4679d64af604533830b2742f0a1718c06f5aeab22b67ddac5a8024885e47d5d41b1dcfa22fabb98391e650d7a62fa4cb742a31d425b5d
-
SSDEEP
1536:kwDeTEhMG5AwoWxUTq4DWeK5j1PRvasmLaMeyiJmvURXkCgeSLjkO8zCBk+ha69:kwiiMGmwoWxUTq4DnKfPRva7LcccRXk/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f59c9e5ee63932cf8203e5e535edecc7_JaffaCakes118
Files
-
f59c9e5ee63932cf8203e5e535edecc7_JaffaCakes118.exe windows:4 windows x86 arch:x86
eedcf26c095304676d76184b9193457d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetProcAddress
LoadLibraryA
lstrcpyA
GetFileAttributesA
lstrlenA
GetModuleFileNameA
DeleteFileA
UnmapViewOfFile
MapViewOfFile
CloseHandle
CreateFileMappingA
WriteFile
CreateFileA
SizeofResource
LoadResource
FindResourceA
WaitForSingleObject
CreateProcessA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetStringTypeW
GetFileType
GetStdHandle
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
user32
GetWindowLongA
DialogBoxParamA
LoadIconA
SendMessageA
SendDlgItemMessageA
wsprintfA
GetDlgItem
EnableWindow
CheckDlgButton
SetWindowLongA
SetTimer
KillTimer
DestroyWindow
MessageBoxIndirectA
MessageBoxA
IsDlgButtonChecked
comdlg32
GetSaveFileNameA
Sections
.text Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ