Static task
static1
Behavioral task
behavioral1
Sample
39b2ee5b6bcd01aa2a3014e512f25884_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
39b2ee5b6bcd01aa2a3014e512f25884_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
39b2ee5b6bcd01aa2a3014e512f25884_JaffaCakes118
-
Size
112KB
-
MD5
39b2ee5b6bcd01aa2a3014e512f25884
-
SHA1
75df098cc09ed915e6f230c7491075f7708530c6
-
SHA256
58617c8fab9da064b7a68bd860040ed33e760c2911f9a4bc9f81860114fc1167
-
SHA512
b048bb0bc94a27dbbd9870e3f09460679275b5df93d58e3ad5880769d90dbe1e80318de228a8bcf1df26f339f0f05a555b01153b4c3b62ff80c8d2547f84a31e
-
SSDEEP
3072:Up4/2mJFvwQAvXotBXqKLLSsrC3I2uItHhVjHJVKS3a8jbm+2nZ2:Up4/2mJFvwQAvXotBXqKnJCTZBVJVXaH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39b2ee5b6bcd01aa2a3014e512f25884_JaffaCakes118
Files
-
39b2ee5b6bcd01aa2a3014e512f25884_JaffaCakes118.exe windows:4 windows x86 arch:x86
c998e0577a6db5c7a3fd4c355c38d9e0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLongPathNameW
GetConsoleCP
FlushViewOfFile
GetCompressedFileSizeA
FindFirstFileA
FindCloseChangeNotification
ConnectNamedPipe
GetFileAttributesExW
GetThreadTimes
urlmon
RegisterMediaTypeClass
CopyStgMedium
RevokeFormatEnumerator
HlinkGoForward
CreateURLMoniker
URLOpenBlockingStreamW
ObtainUserAgentString
CoGetClassObjectFromURL
CopyBindInfo
CoInternetCreateSecurityManager
URLOpenPullStreamW
SetSoftwareUpdateAdvertisementState
RegisterMediaTypes
URLDownloadToCacheFileW
RevokeBindStatusCallback
UrlMkSetSessionOption
CoInternetParseUrl
MkParseDisplayNameEx
UrlMkGetSessionOption
HlinkNavigateMoniker
WriteHitLogging
GetClassFileOrMime
CoInternetCreateZoneManager
GetClassURL
HlinkNavigateString
IsValidURL
CreateAsyncBindCtxEx
FindMimeFromData
HlinkGoBack
RegisterBindStatusCallback
CoInternetGetSession
Sections
.text Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ