Static task
static1
Behavioral task
behavioral1
Sample
259b74abc09c6e838dbb0f5441426f5e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
259b74abc09c6e838dbb0f5441426f5e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
259b74abc09c6e838dbb0f5441426f5e_JaffaCakes118
-
Size
932KB
-
MD5
259b74abc09c6e838dbb0f5441426f5e
-
SHA1
692e36e0d5c88de1023237aa7563985b688467d0
-
SHA256
e12f76fee448191fc626178ebddd2ddf1e991667c576a7693bac2767960b07a9
-
SHA512
51659902d9558bafe4cf81a3bdb25950274c0b9774e2e2651f5bd059d614bd49fb1d5b2300890384333f5dc72ef4785663edfd6662439f956dd33d022154b62f
-
SSDEEP
24576:KGw7IjthC8r06ZkuBakMxfBqaCdMRkwtqpR5Hwhu:KGjB02zMh8vw05Qhu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 259b74abc09c6e838dbb0f5441426f5e_JaffaCakes118
Files
-
259b74abc09c6e838dbb0f5441426f5e_JaffaCakes118.exe windows:5 windows x86 arch:x86
e830e9e153cef1fc22570b84dc1be4b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetVolumeInformationW
ReadFile
lstrlenW
GetEnvironmentVariableA
GlobalAlloc
GetLogicalDrives
GetModuleHandleA
ExitProcess
SetFilePointer
lstrcpynW
LoadLibraryExA
GetDriveTypeW
GetPrivateProfileIntA
lstrcpynA
GetModuleFileNameA
GetTickCount
GetPrivateProfileStringA
lstrlenA
FreeLibrary
CreateFileA
SetErrorMode
user32
DestroyMenu
CharNextA
TrackPopupMenu
CharNextW
RegisterClassA
RegisterWindowMessageA
InsertMenuItemW
DefWindowProcA
GetCursorPos
GetAsyncKeyState
LoadImageA
InsertMenuItemA
CreateWindowExA
CreatePopupMenu
SetForegroundWindow
PostQuitMessage
GetMessageA
FindWindowA
DestroyIcon
MessageBoxA
EnableMenuItem
DestroyWindow
GetWindowTextW
SendMessageA
LoadStringW
SetMenuDefaultItem
DispatchMessageA
msvfw32
DrawDibProfileDisplay
ICRemove
advapi32
RegQueryValueExA
RegOpenKeyA
RegDeleteValueA
RegCloseKey
shlwapi
StrToIntA
PathFileExistsA
shell32
ShellExecuteA
Shell_NotifyIconW
SHGetSpecialFolderPathA
Sections
.text Size: 516KB - Virtual size: 516KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 405KB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ