Static task
static1
Behavioral task
behavioral1
Sample
59c357352173f5ea9b3efd50631027e4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
59c357352173f5ea9b3efd50631027e4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
59c357352173f5ea9b3efd50631027e4_JaffaCakes118
-
Size
4.3MB
-
MD5
59c357352173f5ea9b3efd50631027e4
-
SHA1
659accfc75556df58289eb90a5ff03d6906f07e9
-
SHA256
07d472e2097f2b6456e114bdd79e583e5d8b288e15be3581749aeb25077e624a
-
SHA512
c09c32f6f9698353c1f282a01d8b66f8d84e60b9fd948cb68211af7cb830a81d971239ad3f7b5ae2725913afeda5aa9c5035607212a33671ef9edb1b50024a7d
-
SSDEEP
98304:vYGgie6J7hUdk0ylJE/9tWPDzRMETgfUhI6238bs0:IiEd6/E/+PHRMNfP62Mbh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59c357352173f5ea9b3efd50631027e4_JaffaCakes118
Files
-
59c357352173f5ea9b3efd50631027e4_JaffaCakes118.exe windows:4 windows x86 arch:x86
5064e87dbee8b933173b6f6dc1f504fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
CloseHandle
CreateDirectoryA
CreateFileA
CreateSemaphoreA
ExitProcess
FindAtomA
FindResourceA
FreeLibrary
GetAtomNameA
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
LoadResource
LockResource
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
SizeofResource
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WriteFile
msvcrt
_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
atoi
free
getenv
malloc
memchr
memcpy
memmove
signal
sprintf
strcmp
strerror
shell32
ShellExecuteA
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 18KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE