Static task
static1
Behavioral task
behavioral1
Sample
39bad2aa82af9782c462156aa6148032_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
39bad2aa82af9782c462156aa6148032_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
39bad2aa82af9782c462156aa6148032_JaffaCakes118
-
Size
340KB
-
MD5
39bad2aa82af9782c462156aa6148032
-
SHA1
b5ddcbc46ae40cba2e1a42096e9d305335115868
-
SHA256
3af65befe2d99aa6e649aba71e41aee3586109d6d7dacb2c2a95c40cbd1c5589
-
SHA512
0ceb09c2df4cbcefb874c95d2b17334e681992ddc19175e8b94abbc2618ed50f50a5bb810d7b6f8ca1716912fef6781d8815e86c5b3e9f32e323ab6771384547
-
SSDEEP
6144:LppbSGpKkzYcOGctpYLjP/ccndENDE64oCsE6NlkcRLSuC+A:LppXpKP6X6+oCsEQ+4S5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39bad2aa82af9782c462156aa6148032_JaffaCakes118
Files
-
39bad2aa82af9782c462156aa6148032_JaffaCakes118.exe windows:4 windows x86 arch:x86
ca16a34835850973e2b6151e347a065e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetCurrentProcessId
GetACP
ResumeThread
VirtualProtect
LoadLibraryA
GetCommandLineA
PeekConsoleInputA
FreeConsole
HeapCreate
InterlockedExchange
GetUserDefaultLCID
GetTimeFormatA
HeapDestroy
WaitForSingleObject
GlobalSize
GetOEMCP
GetSystemTime
GlobalMemoryStatus
GetTapeStatus
IsDebuggerPresent
user32
ShowWindow
GetClassNameA
CreateIcon
ReleaseDC
GetDC
AnyPopup
GetWindow
SetForegroundWindow
GetParent
DrawTextA
wsprintfA
FillRect
FrameRect
EndPaint
GetTitleBarInfo
BeginPaint
DragDetect
GetCursorPos
GetFocus
ntshrui
SetFolderPermissionsForSharing
IsFolderPrivateForUser
IsPathSharedA
GetNetResourceFromLocalPathA
GetLocalPathFromNetResourceA
msutb
GetPopupTipbar
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 840KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ