C:\Calculations\Window\Start\ASUS.exe
Static task
static1
Behavioral task
behavioral1
Sample
59ee5352c88c29c440d93ed4dc687241_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
59ee5352c88c29c440d93ed4dc687241_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
59ee5352c88c29c440d93ed4dc687241_JaffaCakes118
-
Size
196KB
-
MD5
59ee5352c88c29c440d93ed4dc687241
-
SHA1
ebcbbe4839e086b4be67f1023b9aa8878e8af241
-
SHA256
74ccb556f1ccfd14a23331b03a6cf648a5df39f5bea82dd876118baa850bdb99
-
SHA512
677d6c72bac6beb20ba5587e79142ae7127f2609cd85c6e5d3afa65966b0ef50782e908bc4ed9ee4fc6e0f63b8068d2d2ab292361ede52a6056c8180915b18a4
-
SSDEEP
3072:sBWX6e99liPK/BuTTYhn/SYZZfZpxJmfBWa+2H/tHpXhuciCr7z7umB55kSVzWzw:sOIPK+s/pvRBmJWLuHLE8nX5kozW4cg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59ee5352c88c29c440d93ed4dc687241_JaffaCakes118
Files
-
59ee5352c88c29c440d93ed4dc687241_JaffaCakes118.exe windows:5 windows x86 arch:x86
c45b0e0da73cac0e5ead5e0dbfa9de50
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ole32
OleBuildVersion
kernel32
FreeLibrary
SetLocalTime
GetHandleInformation
GetLongPathNameW
lstrlenW
SetThreadLocale
SetSystemTime
shlwapi
PathFindExtensionA
msvcrt
floor
isxdigit
isalpha
strspn
user32
CascadeWindows
AllowSetForegroundWindow
DialogBoxParamW
GetWindowLongA
GetDlgItemInt
SystemParametersInfoW
OemToCharA
GetClassLongW
DialogBoxIndirectParamA
MapVirtualKeyExW
SendMessageTimeoutW
Exports
Exports
_PostQuitMessagePostQuitMessagePostQuitMessagePostQuitMessage@0
Sections
.fgfhgf Size: 1024B - Virtual size: 716B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 159KB - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vbbv Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rere Size: 512B - Virtual size: 129B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rtrety Size: 512B - Virtual size: 414B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ