Static task
static1
Behavioral task
behavioral1
Sample
59fed1ff8ec4fede3ef34861d1f60e70_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
59fed1ff8ec4fede3ef34861d1f60e70_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
59fed1ff8ec4fede3ef34861d1f60e70_JaffaCakes118
-
Size
238KB
-
MD5
59fed1ff8ec4fede3ef34861d1f60e70
-
SHA1
16c78d6ab79316149933e5b37f958e6596005b28
-
SHA256
96455a949d548bdf6f373cbb98b74de7c553ec332d43ac9f1bcac6c410211b39
-
SHA512
7b3fef394711819c774d904698af5fea3a59fc7dc48ff0fb5fd2309671359e2fe76b0be3fe1fa575b085151c5ac1b6a1f5304a2cf357194ab3967d9a289c10bf
-
SSDEEP
3072:8TLz6D/RgodfpYuP92hYW5Qd0RuosUAOTzZj+v6BcR/T79DxOdhAYc6okE1lVFSk:4Kx0MTOuosU/3N+yBcR/OdhQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59fed1ff8ec4fede3ef34861d1f60e70_JaffaCakes118
Files
-
59fed1ff8ec4fede3ef34861d1f60e70_JaffaCakes118.exe windows:5 windows x86 arch:x86
1035d636d2e6daf31f25057d6c2cb395
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessageA
TranslateMessage
EnableWindow
LoadIconA
LoadCursorA
RegisterClassExA
GetDlgCtrlID
DispatchMessageA
BeginPaint
EndPaint
SetWindowTextA
GetWindowLongA
CreateWindowExA
ShowWindow
UpdateWindow
gdi32
CreateCompatibleBitmap
CreateEllipticRgn
SetMapMode
CreatePen
DeleteObject
GetStockObject
ole32
OleIsRunning
CoGetCurrentProcess
oleaut32
VectorFromBstr
kernel32
GetStartupInfoA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetFileAttributesA
GetEnvironmentStrings
GetDriveTypeA
HeapCreate
HeapAlloc
GetACP
GetLastError
HeapDestroy
HeapFree
GetModuleHandleA
DeleteCriticalSection
Sections
.text Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ