Static task
static1
Behavioral task
behavioral1
Sample
39c85f99b9e4a651f3b33484cec8fbfe_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
39c85f99b9e4a651f3b33484cec8fbfe_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
39c85f99b9e4a651f3b33484cec8fbfe_JaffaCakes118
-
Size
2.1MB
-
MD5
39c85f99b9e4a651f3b33484cec8fbfe
-
SHA1
0cb432d30db3d2fb344f99a8bad3c3041e8711b0
-
SHA256
0c58e3f0baa0fb61ad3f2b0e191f85a0e36e1d6da9c3831812eabc0defc45e29
-
SHA512
9aee11cbd315146d5994298188a0ed43c1f3bab106bca76f03b5a74f8dedc07b330a4b365ab875148ad4e1bb19af02ced9c96876da1cc5691ed981d0f9aacc19
-
SSDEEP
24576:UGZ6q8sbGzWYmlbAaMRfdL/LBBOIDf9XJqmLaTsIYkz4:BZ6qUjcEakf8yXJqmRIfc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39c85f99b9e4a651f3b33484cec8fbfe_JaffaCakes118
Files
-
39c85f99b9e4a651f3b33484cec8fbfe_JaffaCakes118.exe windows:5 windows x86 arch:x86
04b243131ebbf461d3ac392e42fd54f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
HttpAddRequestHeadersW
HttpOpenRequestW
InternetSetOptionW
InternetOpenUrlW
InternetCrackUrlW
kernel32
EnterCriticalSection
WaitForMultipleObjects
GetFileType
ReadFile
GetSystemInfo
LoadLibraryW
LoadLibraryExW
GetModuleFileNameW
GetCurrentProcessId
GetTempPathW
GetFileAttributesW
FindNextFileW
FindVolumeMountPointClose
CompareStringW
GetUserDefaultLCID
GetConsoleWindow
HeapSize
HeapAlloc
VirtualAlloc
LocalFree
LocalAlloc
GlobalFree
GlobalUnlock
GlobalAlloc
GetVersion
RtlUnwind
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
GetSystemDirectoryW
CreateFileW
FlushFileBuffers
LCMapStringW
HeapReAlloc
GetStringTypeW
OutputDebugStringW
HeapFree
GetConsoleCP
LeaveCriticalSection
GetCPInfo
GetOEMCP
GetCommandLineW
RaiseException
IsProcessorFeaturePresent
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
DeleteCriticalSection
GetStartupInfoW
WriteFile
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
IsDebuggerPresent
IsValidCodePage
GetACP
crypt32
CertFreeCertificateChain
CertGetNameStringW
CryptHashPublicKeyInfo
CryptAcquireCertificatePrivateKey
CryptExportPublicKeyInfo
CertGetEnhancedKeyUsage
CertFreeCTLContext
CertAddCertificateContextToStore
CertGetCertificateContextProperty
CertFreeCertificateContext
CertCreateCertificateContext
CertCloseStore
CertOpenStore
CryptMsgGetParam
CryptEncodeObjectEx
CertVerifyCertificateChainPolicy
user32
DdeGetData
TranslateMDISysAccel
PtInRect
InflateRect
HideCaret
GetCursor
InsertMenuItemW
DeleteMenu
GetSystemMenu
GetSystemMetrics
SetFocus
CheckRadioButton
GetDoubleClickTime
DrawAnimatedRects
CloseDesktop
GetKeyboardLayout
IsRectEmpty
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 599KB - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ou1a2 Size: 410KB - Virtual size: 409KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.4e0ye Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.8p57 Size: 553KB - Virtual size: 553KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ