Static task
static1
Behavioral task
behavioral1
Sample
259859d88367f59caf6f3ae69c9c86e9_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
259859d88367f59caf6f3ae69c9c86e9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
259859d88367f59caf6f3ae69c9c86e9_JaffaCakes118
-
Size
13KB
-
MD5
259859d88367f59caf6f3ae69c9c86e9
-
SHA1
4386996e86f5b24587f30629a091f2fad4483175
-
SHA256
ad33838fa7cbbb48c1fd3b098490a9fbe9e5e6b8402933777c0fa2d10358cb1c
-
SHA512
2295480943e49d516da84528190a5b4ca7ca74453e44d6ce7799beee798d0397bc89a3d18df49ccd0bb571c96c46b7e6e6bc69ba5c6f1126de76defd792e89fd
-
SSDEEP
192:m6YNh4G0WK9C8TFYO+10/OGc/KKJ7dtbLzRvcWAzj:64GKc362dJdtbLzRvcW0j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 259859d88367f59caf6f3ae69c9c86e9_JaffaCakes118
Files
-
259859d88367f59caf6f3ae69c9c86e9_JaffaCakes118.exe windows:1 windows x86 arch:x86
99db6db55604a55dd04ac6fefc8ddd5c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
Shell_NotifyIconA
ole32
CoCreateInstance
CoInitialize
CoUninitialize
kernel32
DeleteFileA
ExitProcess
ExpandEnvironmentStringsA
FreeLibrary
GetCommandLineA
GetExitCodeThread
GetFileAttributesA
GetFileSize
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemDefaultLCID
GetSystemDefaultLangID
GetSystemDirectoryA
CloseHandle
LoadLibraryA
CopyFileA
LocalAlloc
LocalFree
MultiByteToWideChar
ReadFile
RtlUnwind
RtlZeroMemory
CreateFileA
SetFilePointer
VerLanguageNameA
VirtualAlloc
VirtualFree
WaitForSingleObject
WinExec
WriteFile
lstrcpyA
CreateThread
user32
SetTimer
KillTimer
LoadIconA
MessageBoxA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
RegisterClassA
PostQuitMessage
CreateWindowExA
DefWindowProcA
advapi32
RegCreateKeyA
RegCreateKeyExA
RegCloseKey
RegFlushKey
RegSetValueExA
crtdll
_itoa
__GetMainArgs
_sleep
_stricmp
abort
exit
raise
signal
strcat
strchr
strcmp
strncpy
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 88B - Virtual size: 88B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE