Static task
static1
Behavioral task
behavioral1
Sample
59fd90f64a1ab232542b03d046c3abd2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
59fd90f64a1ab232542b03d046c3abd2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
59fd90f64a1ab232542b03d046c3abd2_JaffaCakes118
-
Size
69KB
-
MD5
59fd90f64a1ab232542b03d046c3abd2
-
SHA1
dc6221ed6df975433b2c2e84a93ee783f27be8f3
-
SHA256
fcdc022e2dd2e826f34df3e21eeb9add335e24b03e22eb3384136a3bb56c3dc0
-
SHA512
2e9857f75798c4aab03923e3d7252d9d31cc05a074871a47a3794573e9a9615aca7a9e2405136d26670c9f96a708c6ba410a081255eb5ee3422398f349598fa8
-
SSDEEP
384:7XarlCcrQl/NbFX+p2DoEXDTi7BdENMuac7oJ73yeT0mYlHczurKzobQCQ7kN+:TQjQxr+cDooy7B5J73yTmMoAiW+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59fd90f64a1ab232542b03d046c3abd2_JaffaCakes118
Files
-
59fd90f64a1ab232542b03d046c3abd2_JaffaCakes118.exe windows:4 windows x86 arch:x86
da64aed4c0ec512290b1dbfb19c77ff6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetFocus
RegisterWindowMessageA
PostMessageA
MessageBoxA
SetMessageQueue
kernel32
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalLock
nlsrtl33
ord201
ord175
ord117
ord6
ord3
ord2
ord4
ord203
ord11
nn60
ord4
ord136
ord85
ord28
ord132
ord131
uiw60
ord8005
ord8002
og60
ord5
msvcrt
_controlfp
free
__p__fmode
__set_app_type
strcpy
strncmp
strcmp
memset
__p__acmdln
strlen
malloc
_XcptFilter
_except_handler3
__getmainargs
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_exit
exit
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE