Static task
static1
Behavioral task
behavioral1
Sample
59b7abb83f127e660eff96f8c205589b_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
59b7abb83f127e660eff96f8c205589b_JaffaCakes118
-
Size
224KB
-
MD5
59b7abb83f127e660eff96f8c205589b
-
SHA1
d541a072e8361d7ae0763a0cdd89fb689b7adcaf
-
SHA256
b6beb070ffc6553d98ec58763ee1e1f33496d70f50b4307851fb983e36374c32
-
SHA512
4abae6d11cf182f1fe77224161fad2ec70ca1c8370c2d8de491f6151fbe856044ab85c7b82e4cdaf7e0433a908e61af866ab499703bbf50809477203dacd9d42
-
SSDEEP
3072:h997dllr77kE1Cd4nAd5291BWPPEwfFI+/izL6yGJ+2EtPm07mYDbNtSq4d1McZL:hFrNABe91skMIgizLaJ5t07m2tS9/McF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59b7abb83f127e660eff96f8c205589b_JaffaCakes118
Files
-
59b7abb83f127e660eff96f8c205589b_JaffaCakes118.exe windows:4 windows x86 arch:x86
c939efd3e613766cf15b690466d5f757
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
VirtualAlloc
VirtualProtect
GetCurrentThreadId
GetCurrentProcess
GetExitCodeThread
LoadLibraryA
CreateEventA
DeleteTimerQueue
GetProcAddress
GlobalFree
GetModuleHandleA
ResetEvent
HeapUnlock
LocalLock
LocalSize
FindFirstFileA
lstrcpyA
VirtualFree
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapSize
VirtualQuery
InterlockedExchange
RtlUnwind
HeapReAlloc
HeapAlloc
GetModuleFileNameA
GetLastError
GetCPInfo
GetSystemInfo
GetOEMCP
GetACP
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
user32
IsWindowVisible
LoadCursorA
GetDesktopWindow
LoadAcceleratorsA
GetDC
GetCursorPos
ReleaseDC
CreateIcon
IsZoomed
IsIconic
SetCursorPos
GetWindowRect
SetCursor
GetTopWindow
GetWindowInfo
SetTimer
gdi32
CreateSolidBrush
shell32
ord256
psapi
GetModuleBaseNameA
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 153KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ