Static task
static1
Behavioral task
behavioral1
Sample
59de77f431854529f7f139202be34661_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
59de77f431854529f7f139202be34661_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
59de77f431854529f7f139202be34661_JaffaCakes118
-
Size
1.3MB
-
MD5
59de77f431854529f7f139202be34661
-
SHA1
daa6e83158a4e2e5055fdc2a7feb4649bb16b24c
-
SHA256
5a80d893d813bd268af30cc9dc1e0f9b615e6b9e844448c1ddc180a727065325
-
SHA512
cd43f555e1b040fad8fa41a221d922d810e4f9fee0f4d609cd08403a7eac5089daec2173966cfcf7e0c6c11cba944ad9ef208953ac47a1f3330c82a046333791
-
SSDEEP
24576:NCZQ4oQFV6DPjxFCA70WnoPuwR2pvrCZaVMspHsR+VXJ:gZQ6FKjv7ivRSes/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59de77f431854529f7f139202be34661_JaffaCakes118
Files
-
59de77f431854529f7f139202be34661_JaffaCakes118.exe windows:4 windows x86 arch:x86
665761b42a60ccd73c83a7afda187338
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadConsoleA
OpenFile
GetStdHandle
GetLastError
CopyFileA
Sleep
SetLastError
ReadFile
GetConsoleMode
GetCommandLineA
ExitThread
GetFileSize
CopyFileExA
DeleteFileW
WriteFile
CreateThread
CopyFileExW
FindFirstFileA
CreateProcessA
CopyFileW
GetCPInfo
ReadConsoleA
DeleteAtom
ReadFile
CreateThread
CopyFileA
DeleteFileA
DeleteFileW
SetLastError
CopyFileW
GetFileTime
GlobalFree
GetConsoleMode
DeleteFileA
GetComputerNameA
ReadConsoleA
FindFirstFileA
ExitThread
Sleep
GetStdHandle
FindAtomA
CopyFileExA
GetCPInfo
CopyFileExW
GlobalFree
FindFirstFileA
CreateDirectoryA
GetFileSize
DeleteFileA
GetStdHandle
OpenFile
GetLastError
DeleteAtom
CreateProcessA
ReadConsoleA
CopyFileExA
OpenFileMappingA
GetCommandLineA
Sleep
Sections
.rdata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 24KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 4KB - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ