Static task
static1
Behavioral task
behavioral1
Sample
59c98ee6e3f72d128cb9dd16884926f3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
59c98ee6e3f72d128cb9dd16884926f3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
59c98ee6e3f72d128cb9dd16884926f3_JaffaCakes118
-
Size
64KB
-
MD5
59c98ee6e3f72d128cb9dd16884926f3
-
SHA1
1bc452bde253a5d15f6069057d0952b6fde5e237
-
SHA256
1e02a666cfe3c92b444aec9e1e8e8085cedafe232dfbd619709ee46e15a819ff
-
SHA512
9a5c0c508c05593b95718c0c2118b34dd478b089eaf964612aa6fd1d57ec6b53d3cf3bd110d212918f29df9a9c42f64e13fd498e81e00490688de1f7c16b4a56
-
SSDEEP
384:GPUKpsW7CkaN8aQ27ikZ0KZbRKB+LmAcAS+dGyAtgK4oEwgH/HuitbDOK7P9iqkM:YUGsWG9jQ2xiyK+89u5fHnDnoJM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59c98ee6e3f72d128cb9dd16884926f3_JaffaCakes118
Files
-
59c98ee6e3f72d128cb9dd16884926f3_JaffaCakes118.exe windows:4 windows x86 arch:x86
6111a2710b71d5b3fb3292c9c02d935f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RegisterServiceProcess
GetCurrentProcessId
GetLastError
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
WriteFile
ReadFile
CloseHandle
DeleteFileA
SetFilePointer
CreateFileA
GetFileType
GetStartupInfoA
GetStdHandle
GetCommandLineA
SetUnhandledExceptionFilter
GetLastError
CreateProcessA
GetExitCodeProcess
WaitForSingleObject
CloseHandle
GetEnvironmentStringsA
FreeEnvironmentStringsA
FreeLibrary
GetVersionExA
LoadLibraryA
GetProcAddress
user32
MessageBoxA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 704B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ