Static task
static1
Behavioral task
behavioral1
Sample
59f8f1a329b369a4ecb26725be93ca61_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
59f8f1a329b369a4ecb26725be93ca61_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
59f8f1a329b369a4ecb26725be93ca61_JaffaCakes118
-
Size
332KB
-
MD5
59f8f1a329b369a4ecb26725be93ca61
-
SHA1
16652a391cbb30c1b96fd1ca495bc3796ff151a5
-
SHA256
d9c8680c91b5c84ddc489834e4e1c0d1815e350535cd4f3f9cc8ed84f528f70c
-
SHA512
870fe08874952c603c257fb1372d8c3bbe9ebe91b59c443e63a6b7dd4efa9e726c84115b676044e3b90b6303522ea9856a9f4bfdc5ae76b27ad25d8fbb0b849e
-
SSDEEP
6144:DOmwL57dxw4rbzekAMa7DITRLUWnZWvhnAEvqzNvDW6+x1dHLF:aB3xw4rJAMa7DGRGhnAJz5W9x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59f8f1a329b369a4ecb26725be93ca61_JaffaCakes118
Files
-
59f8f1a329b369a4ecb26725be93ca61_JaffaCakes118.exe windows:4 windows x86 arch:x86
081f434041b9786b9f242d741d028424
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
StgOpenPropStg
CoGetObject
OleSetMenuDescriptor
BindMoniker
PropVariantClear
OleRegGetMiscStatus
OleCreateDefaultHandler
OleNoteObjectVisible
CoFileTimeToDosDateTime
OleLoadFromStream
CoRegisterPSClsid
GetRunningObjectTable
IIDFromString
CoTaskMemAlloc
gdi32
CopyEnhMetaFileA
CreateCompatibleDC
AbortDoc
EnumObjects
CombineRgn
GetBrushOrgEx
GetBitmapDimensionEx
EqualRgn
CopyEnhMetaFileW
CreateDiscardableBitmap
CloseMetaFile
comctl32
ord6
CreateStatusWindowW
ord16
PropertySheetA
CreatePropertySheetPageW
ord8
ord3
ord14
shlwapi
StrStrA
StrRStrIW
StrRChrIW
StrCSpnW
StrChrIW
StrToIntA
kernel32
FreeEnvironmentStringsA
LocalHandle
HeapLock
GetProcAddress
GetModuleFileNameA
GetEnvironmentStrings
QueryPerformanceCounter
TlsGetValue
GetTickCount
TlsSetValue
VirtualAlloc
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
MultiByteToWideChar
GetNumberFormatA
LeaveCriticalSection
VirtualAllocEx
LCMapStringA
IsBadWritePtr
HeapAlloc
EnterCriticalSection
SetLocaleInfoA
GetACP
msvcrt
__setusermatherr
_exit
_controlfp
_except_handler3
exit
_acmdln
__getmainargs
_initterm
_XcptFilter
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 314KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ