Static task
static1
Behavioral task
behavioral1
Sample
59dcf4b8c7d693b8cfa677ac9d65d86c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
59dcf4b8c7d693b8cfa677ac9d65d86c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
59dcf4b8c7d693b8cfa677ac9d65d86c_JaffaCakes118
-
Size
140KB
-
MD5
59dcf4b8c7d693b8cfa677ac9d65d86c
-
SHA1
cd16d8042ec0ce484247c8e021f74aa5c20ee2c5
-
SHA256
c37213d283dc287aaef685805a0428e7eb02b01d3d137e3c5fed9036a9d1f1fa
-
SHA512
7ccaf454ac69e0a9c403b5e03f0552870f7c2c0599127fd5f3e59ca5ee9191d594b0d4d56ef57ad9f0fb7d03c242e6cd3411a0798c59e38953fb4997f5bd6571
-
SSDEEP
1536:TdWirxmZ8o1GxOlukButNJdgTxQgIYkbqJd1PWJs//MWpKm2+6Cy6BW8CHNAwC:TdPrxpoIQBudKxQakb7u8Wp3PW8CNA5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59dcf4b8c7d693b8cfa677ac9d65d86c_JaffaCakes118
Files
-
59dcf4b8c7d693b8cfa677ac9d65d86c_JaffaCakes118.exe windows:4 windows x86 arch:x86
df81a718cd12a6c80781592ae268595a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsA
CreateProcessA
lstrcatA
lstrcpyA
GetModuleFileNameA
GetPrivateProfileStringA
lstrlenA
lstrcpynA
GetVersionExA
GetSystemDefaultLangID
GetStdHandle
SetHandleCount
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
CloseHandle
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetProcAddress
MultiByteToWideChar
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetStringTypeW
LCMapStringA
LCMapStringW
GetStringTypeA
HeapAlloc
VirtualAlloc
HeapReAlloc
user32
GetSystemMetrics
wsprintfA
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ