Static task
static1
Behavioral task
behavioral1
Sample
59f4196a8559b776df0f4c7bcde6319a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
59f4196a8559b776df0f4c7bcde6319a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
59f4196a8559b776df0f4c7bcde6319a_JaffaCakes118
-
Size
107KB
-
MD5
59f4196a8559b776df0f4c7bcde6319a
-
SHA1
ff6d76df3fdae25a1c57d7204fea799479b5920d
-
SHA256
12ae13796c8f167c29f0d306f85414b06d069e058722ceae4534970dd9b9753b
-
SHA512
d29b55ea0ee422da39dc8da6ee68a28810d4365eeff4e69244d2b93295a899deda4a9005cc4584a65101994af9507ff7b17612a3f0e5d21a0dc6f7905187c6af
-
SSDEEP
1536:TgqAxatX2YARcsvC+G0YRLM+Iu71NmFuNGQ7h+YD29augEJbBhAf7l1bg:8fwbNs89IuZNFGgh+GuL9BK1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59f4196a8559b776df0f4c7bcde6319a_JaffaCakes118
Files
-
59f4196a8559b776df0f4c7bcde6319a_JaffaCakes118.exe windows:5 windows x86 arch:x86
bbcb306c3ac2eb321b8b047ed9bacbd6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SelectObject
CreateCompatibleDC
GetPixel
GetStockObject
CreateFontIndirectA
RestoreDC
DeleteDC
GetObjectA
CreatePalette
SaveDC
GetTextMetricsA
SetMapMode
SelectPalette
PatBlt
DeleteObject
GetDeviceCaps
LineTo
CreatePen
RectVisible
CreateSolidBrush
GetNearestPaletteIndex
SetStretchBltMode
SetTextColor
GetClipBox
SetTextAlign
kernel32
lstrcmpiW
GetThreadLocale
GetTickCount
CopyFileA
GetUserDefaultLangID
DeleteFileA
GetModuleHandleA
GetOEMCP
IsDebuggerPresent
SetCurrentDirectoryA
GetCurrentProcessId
GetConsoleOutputCP
GetCurrentProcess
lstrcmpA
QueryPerformanceCounter
GetWindowsDirectoryA
GetStartupInfoA
GetModuleHandleW
DeleteFileW
GlobalFindAtomW
lstrlenW
GetCurrentThread
GetCommandLineA
GetACP
lstrcmpiA
RemoveDirectoryA
GetVersion
lstrlenA
RemoveDirectoryW
GetCurrentThreadId
GetProcessHeap
GetDriveTypeA
MulDiv
ExitProcess
VirtualAlloc
GetCommandLineW
GlobalFindAtomA
user32
GetDC
TranslateMessage
CharNextA
GetParent
GetSystemMetrics
GetDesktopWindow
glu32
gluQuadricCallback
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ