Static task
static1
Behavioral task
behavioral1
Sample
39c07c940d17cfd57595b4a8514ea178_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
39c07c940d17cfd57595b4a8514ea178_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
39c07c940d17cfd57595b4a8514ea178_JaffaCakes118
-
Size
218KB
-
MD5
39c07c940d17cfd57595b4a8514ea178
-
SHA1
3c966297eb8092468f2cdbe0f2c3ba3791be0a3e
-
SHA256
4097de5d72d8a77d23efad93dd717d9becb2192860108e3527a6b77e3566346e
-
SHA512
32f73654fe5ecab5992f91e409dea7e2453a8e3a63f4fd2fc09315c6655ab8193bf7955d69ad44ce8f1ad9d51d3342610443f6105c790de704417eae7737cf50
-
SSDEEP
3072:TbzpwtbW++fOHyniT5+/Tiu4/K2RRPEGUrcN3rLs7dQ6C1ATcGwA689W:TBWkfHiT54CNnEI33FVGwBS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39c07c940d17cfd57595b4a8514ea178_JaffaCakes118
Files
-
39c07c940d17cfd57595b4a8514ea178_JaffaCakes118.exe windows:5 windows x86 arch:x86
429c55aa33103750547c8d05ae6eac29
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RaiseException
GetLastError
GetThreadLocale
GetProcAddress
GlobalFree
GetLocalTime
LoadLibraryA
CreateFileMappingA
LockResource
DecodePointer
GetModuleFileNameA
GetModuleHandleA
lstrcatW
DeleteCriticalSection
GetVersionExA
CloseHandle
DeleteFileW
GetTempPathA
DeleteFileA
Sleep
IsDebuggerPresent
MultiByteToWideChar
WriteConsoleW
SetStdHandle
OutputDebugStringW
LCMapStringW
HeapReAlloc
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetSystemDirectoryA
CreateProcessA
SizeofResource
InitializeCriticalSectionAndSpinCount
GlobalAlloc
WriteFile
GetTickCount
GetCurrentProcess
LoadResource
UnmapViewOfFile
MapViewOfFile
lstrlenA
SetFilePointer
FindResourceA
CreateFileA
QueryPerformanceCounter
GetModuleFileNameW
FlushFileBuffers
GetFileType
GetStdHandle
GetProcessHeap
GetModuleHandleW
GetStartupInfoW
TlsFree
ReadFile
CreateFileW
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
SetEvent
InitializeCriticalSection
CreateEventA
CreateSemaphoreA
ReleaseSemaphore
ResetEvent
EncodePointer
IsProcessorFeaturePresent
HeapFree
GetCommandLineA
RtlUnwind
HeapAlloc
CreateThread
GetCurrentThreadId
ExitThread
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
ExitProcess
GetModuleHandleExW
WideCharToMultiByte
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
user32
LoadCursorA
wsprintfA
DialogBoxParamA
EndPaint
DestroyWindow
GetMessageA
RegisterClassExA
PostQuitMessage
LoadStringA
LoadIconA
BeginPaint
TranslateMessage
CreateWindowExA
TranslateAcceleratorA
EndDialog
DefWindowProcA
GetCursorPos
LoadAcceleratorsA
ShowWindow
DispatchMessageA
UpdateWindow
advapi32
FreeSid
RegSaveKeyA
AllocateAndInitializeSid
LookupPrivilegeValueA
RegCreateKeyA
RegEnumKeyExA
RegDeleteKeyA
EqualSid
GetTokenInformation
OpenProcessToken
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
AdjustTokenPrivileges
shell32
SHGetSpecialFolderPathW
ole32
CLSIDFromProgID
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
SysFreeString
SysAllocString
Sections
.text Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ