Static task
static1
Behavioral task
behavioral1
Sample
59f5b5b38268cf2a7c345d6cc3f8f303_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
59f5b5b38268cf2a7c345d6cc3f8f303_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
59f5b5b38268cf2a7c345d6cc3f8f303_JaffaCakes118
-
Size
350KB
-
MD5
59f5b5b38268cf2a7c345d6cc3f8f303
-
SHA1
39b898873c2a32f05b82617e88018118dc33be3f
-
SHA256
c88a21a5af290ad81695bca79c3dbc2eedf0d35b307d208cc6cfe531cdb0e50b
-
SHA512
686711fd57a235a1a94204b5ffb12d33dfa6f2df9995a25754d67a6b5646489ae522a1b9d7ba32c4a9f090fc1340d9917819785da73544a84185396c0e3bfacb
-
SSDEEP
6144:Pvd/T0yclQcvohI8e7xYJSpctM0v66CLj+W9RvGdQPSMDrpy03Trdexgw:PF70HpSI8elUv66y6W9lG2znpTjIB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59f5b5b38268cf2a7c345d6cc3f8f303_JaffaCakes118
Files
-
59f5b5b38268cf2a7c345d6cc3f8f303_JaffaCakes118.exe windows:4 windows x86 arch:x86
2717a120f3532759192746b08a75beea
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
CreateFileA
WriteFile
GetEnvironmentVariableW
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 324B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 274KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE