Static task
static1
Behavioral task
behavioral1
Sample
59fad2f38ffc8873ab9fbc9d791462b0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
59fad2f38ffc8873ab9fbc9d791462b0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
59fad2f38ffc8873ab9fbc9d791462b0_JaffaCakes118
-
Size
1.3MB
-
MD5
59fad2f38ffc8873ab9fbc9d791462b0
-
SHA1
06a4860f0915f245e63746d860325e19199c396a
-
SHA256
48d3bf00257a500aa6347752c2d32067abe995da92a40e3c9879a46e5e25a49d
-
SHA512
0c744789745af4fa91a6da0e477715f382e4bdc6be9f424b9da0c06ae1a6a0109bf9a41149f5238c615e2dd7d19e23186858fe9937c2935689d1525e1e88675b
-
SSDEEP
24576:HLSzA5VIHQm1jQ/+GkSsdYVAHQn7sNrq7xBSKCzlmqBom:rfUN1+FsdYVAHWsN2za1T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59fad2f38ffc8873ab9fbc9d791462b0_JaffaCakes118
Files
-
59fad2f38ffc8873ab9fbc9d791462b0_JaffaCakes118.exe windows:4 windows x86 arch:x86
851ef81a64717a71f5b8007cff3b0985
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalReAlloc
CopyFileA
CreateDirectoryA
GetLastError
GetLastError
GlobalLock
LocalLock
OpenFile
ReadFile
GlobalSize
DeleteFileA
OpenFile
CreateDirectoryA
CopyFileA
GetComputerNameA
ReadFile
GlobalLock
GlobalFree
GlobalSize
ExitThread
GetFileSize
FindAtomA
OpenFileMappingA
LocalLock
GlobalUnlock
GetCPInfo
GlobalLock
ExitThread
LocalSize
GetComputerNameA
GetLastError
FindAtomA
GlobalSize
OpenFileMappingA
GetStdHandle
WriteFile
OpenFileMappingA
FindFirstFileA
HeapAlloc
GetFileTime
DeleteFileA
LocalReAlloc
GlobalAlloc
LocalSize
WriteFile
WriteFile
GlobalUnlock
CreateDirectoryA
GetFileTime
CopyFileA
GetFileTime
DeleteFileA
Sleep
GetCPInfo
GlobalFree
LocalLock
HeapFree
FindFirstFileA
GlobalUnlock
Sleep
GetFileSize
ReadFile
GlobalAlloc
GlobalAlloc
GetFileSize
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DATA Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.init Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 1.2MB - Virtual size: 5.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.itls Size: 512B - Virtual size: 97B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ddata Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ