Static task
static1
Behavioral task
behavioral1
Sample
59a1776c92b0fe26eb212f31e2088414_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
59a1776c92b0fe26eb212f31e2088414_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
59a1776c92b0fe26eb212f31e2088414_JaffaCakes118
-
Size
1.6MB
-
MD5
59a1776c92b0fe26eb212f31e2088414
-
SHA1
7f82477de98196184316a5a7a9f63eba615e8fbe
-
SHA256
c2d544637057f57c674c74f4486a4eeb6067d66a2ecfa2059eddaba0d5ff93b0
-
SHA512
9897d02b417188b87d045c938066803236c3224206f40445d6432ac9aa12be89e741c86776393a5f95f7b18614927b99c0db816b75954611b2e81adff5b08064
-
SSDEEP
49152:C95il6AHVBmVTcz3vHaHlfRvyfsbxylgo:68l6WVBmOz3vqRvyfio
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59a1776c92b0fe26eb212f31e2088414_JaffaCakes118
Files
-
59a1776c92b0fe26eb212f31e2088414_JaffaCakes118.exe windows:4 windows x86 arch:x86
fcd1bdba31e85c21aef31ad0ff1ab198
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
Sleep
GetModuleFileNameA
GetStdHandle
GetCommandLineA
WaitForSingleObject
ReadFile
CreatePipe
GetModuleHandleA
HeapFree
HeapAlloc
GetStringTypeW
GetStringTypeA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetProcAddress
GetOEMCP
LoadLibraryA
GetCPInfo
GetACP
VirtualAlloc
WriteFile
HeapReAlloc
HeapCreate
ExitProcess
TerminateProcess
GetCurrentProcess
GetLastError
ResumeThread
CreateThread
TlsSetValue
ExitThread
CloseHandle
GetStartupInfoA
GetVersion
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
VirtualFree
GetCurrentThreadId
TlsAlloc
SetLastError
TlsGetValue
UnhandledExceptionFilter
RtlUnwind
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
user32
SetTimer
MessageBoxA
DefWindowProcA
DestroyWindow
MoveWindow
SetFocus
SendMessageA
GetWindowTextLengthA
MessageBeep
ShowWindow
UpdateWindow
LoadCursorA
BringWindowToTop
LoadIconA
CreateDialogParamA
RegisterClassA
LoadBitmapA
TranslateMessage
LoadStringA
GetMessageA
PostMessageA
DispatchMessageA
WaitForInputIdle
EndPaint
GetSystemMetrics
BeginPaint
PostQuitMessage
GetWindowLongA
CreateWindowExA
gdi32
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
GetObjectA
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ