Static task
static1
Behavioral task
behavioral1
Sample
39b72554979335e193238c7a073971c4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
39b72554979335e193238c7a073971c4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
39b72554979335e193238c7a073971c4_JaffaCakes118
-
Size
700KB
-
MD5
39b72554979335e193238c7a073971c4
-
SHA1
309483b2a1820181a5ce37d4f49025d4c2143ad5
-
SHA256
bcb000c658768147b9c9c7452d47108a83bcf30920e5ff77db3fa2389db7232b
-
SHA512
05a022ccba365e278efd4de5e36f5293dc320e49aa2617b42df90cfc37020263d36bde1496ce65a3b22839fdab799475cb08fda124b837277c5d9b5ba0df3667
-
SSDEEP
12288:3bZ8wrkeoqUSjHVG55H5IsYxkAw3GCnGlRa6eBQLVl47mpDWMA7:yw5NUKVG55H5v3BnE4QLVl3p6t7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39b72554979335e193238c7a073971c4_JaffaCakes118
Files
-
39b72554979335e193238c7a073971c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
67a20cf457d2820d966c0d18d5d7966d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CopyEnhMetaFileW
GetLayout
GetStretchBltMode
ScaleViewportExtEx
PolyTextOutA
GetTextColor
EnumEnhMetaFile
ColorMatchToTarget
GetTextMetricsA
AddFontResourceA
SetPixel
CreatePen
CreateEnhMetaFileA
EndDoc
CreateScalableFontResourceW
FixBrushOrgEx
user32
LoadCursorA
WaitForInputIdle
SetUserObjectInformationW
RegisterClassExA
WindowFromDC
SendDlgItemMessageW
DefWindowProcA
SetMenuItemInfoA
CloseWindow
GetClassLongW
DdeCreateStringHandleW
SetWindowRgn
EndDeferWindowPos
GetMenuCheckMarkDimensions
GetKeyState
RegisterClassA
GetClipboardSequenceNumber
InternalGetWindowText
GetDesktopWindow
DdeSetUserHandle
EnumDesktopsA
ExitWindowsEx
GetDC
DlgDirSelectComboBoxExW
IsWindow
WINNLSEnableIME
SendNotifyMessageW
ScreenToClient
AdjustWindowRectEx
CreateWindowExA
ShowWindow
GetMenuItemID
RealGetWindowClass
VkKeyScanExW
GetDlgItemTextA
DestroyWindow
MapDialogRect
GetCaretPos
CharLowerW
AnimateWindow
OpenWindowStationA
SetMessageExtraInfo
CreateMenu
IntersectRect
GetForegroundWindow
EnumPropsW
WinHelpW
DdeReconnect
GetPriorityClipboardFormat
ToAscii
EnumDisplayDevicesA
MenuItemFromPoint
DestroyIcon
MessageBoxW
EnableWindow
EmptyClipboard
GetKeyboardLayoutNameW
kernel32
FlushFileBuffers
FreeEnvironmentStringsA
HeapSize
GetCommandLineW
GetEnvironmentStringsW
Sleep
TlsGetValue
VirtualQuery
GetDateFormatA
LocalCompact
GetCurrentProcess
WaitForMultipleObjects
VirtualFree
TlsFree
GetCommandLineA
ExpandEnvironmentStringsW
GetLocaleInfoA
GetSystemTimeAsFileTime
TerminateProcess
GetStdHandle
ExitProcess
SetConsoleCtrlHandler
LeaveCriticalSection
MultiByteToWideChar
GetProcessHeap
GetConsoleCP
ReadConsoleOutputA
GetSystemTime
HeapCreate
GetModuleFileNameA
GetVersionExA
InterlockedExchange
VirtualAlloc
CloseHandle
RtlUnwind
SetConsoleTitleW
FreeEnvironmentStringsW
GetACP
CreateFileA
GetCurrentProcessId
GetModuleHandleA
GetTimeZoneInformation
SetLocalTime
GetTickCount
SetEvent
GetProcAddress
TlsAlloc
GetFileType
GetModuleFileNameW
WriteConsoleA
HeapAlloc
GetCurrentThreadId
GetFileAttributesExA
GetCPInfo
InterlockedIncrement
GetLastError
UnhandledExceptionFilter
GetConsoleOutputCP
LCMapStringW
SetStdHandle
HeapFree
GetConsoleMode
GetTimeFormatA
LCMapStringA
GetEnvironmentStrings
GetUserDefaultLCID
TlsSetValue
IsValidCodePage
SetLastError
WideCharToMultiByte
SetEnvironmentVariableA
IsDebuggerPresent
FoldStringW
CompareStringW
HeapDestroy
InterlockedDecrement
VirtualFreeEx
IsValidLocale
DeleteCriticalSection
GetStringTypeW
GetLocaleInfoW
EnumSystemLocalesA
GetProfileStringA
SetFilePointer
CreateMutexA
GlobalAddAtomA
InitializeCriticalSection
GetStartupInfoW
HeapReAlloc
GlobalUnfix
GetStringTypeA
CompareStringA
OpenMutexA
QueryPerformanceCounter
WriteConsoleW
GetCurrentThread
EnterCriticalSection
GetStartupInfoA
LoadLibraryA
ReadFile
WriteFile
FreeLibrary
SetHandleCount
SetUnhandledExceptionFilter
WaitForSingleObject
GetOEMCP
comctl32
ImageList_GetImageRect
InitCommonControlsEx
ImageList_GetImageInfo
ImageList_DragEnter
Sections
.text Size: 228KB - Virtual size: 225KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 260KB - Virtual size: 258KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ