Static task
static1
Behavioral task
behavioral1
Sample
39b764e3324a36371dae265ef03393bd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
39b764e3324a36371dae265ef03393bd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
39b764e3324a36371dae265ef03393bd_JaffaCakes118
-
Size
152KB
-
MD5
39b764e3324a36371dae265ef03393bd
-
SHA1
3139038dcdee441369999d6ad0c9f959bbedfdbd
-
SHA256
dd5d2d9402db91089c3f0b9c271e2ddd4625fd7a7b4e272025d6ccba3c1e62ca
-
SHA512
38e28b6eede7760c0c7bb1a3e3a0d470aa59d39d88c61c8869f246351ef2290a6696a63f0e40a9940c9b3566e315948d8a79e1ffccb5e82e704e788fecacf0bd
-
SSDEEP
3072:2Hz0tUXZ1hKr3OJLmLzsvLSjjB5OrL0oz:W/YcVL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39b764e3324a36371dae265ef03393bd_JaffaCakes118
Files
-
39b764e3324a36371dae265ef03393bd_JaffaCakes118.exe windows:4 windows x86 arch:x86
d3e404288f7a31f65705629bdf52bc37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetQueryDataAvailable
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile
netapi32
Netbios
mfc42
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4424
ord3721
ord795
ord641
ord567
ord324
ord825
ord2302
ord4234
ord3089
ord4476
ord2379
ord6880
ord755
ord5873
ord470
ord2915
ord6877
ord800
ord858
ord537
ord540
ord6663
ord4129
ord2764
ord4202
ord4278
ord4204
ord4277
ord539
ord1601
ord823
ord1948
ord2396
ord3346
ord5300
ord3402
ord4079
ord4699
ord5307
ord5289
ord4622
ord565
ord2726
ord4226
ord817
ord5683
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord5302
ord2725
ord4698
ord5714
ord3738
ord561
ord815
ord818
ord2621
ord1134
ord1146
ord1168
ord2135
ord1106
ord2086
ord6215
ord4299
ord2864
ord5953
ord2688
ord665
ord3318
ord3507
ord5186
ord354
ord5572
ord1949
ord4034
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord6055
ord3597
ord4425
ord5280
ord1775
ord6052
ord2514
ord4710
ord4998
ord4853
ord4376
ord5265
ord5303
ord1576
msvcrt
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
strncmp
isalnum
isspace
sscanf
fputc
toupper
strstr
_ftol
malloc
free
_splitpath
remove
rename
fgetc
fopen
fgets
fclose
__p___argv
_except_handler3
_access
time
srand
rand
strncpy
atoi
_sopen
_lseeki64
_read
_close
__CxxFrameHandler
_strnicmp
_strupr
_setmbcp
_initterm
kernel32
GetProcAddress
LoadLibraryA
GetComputerNameA
GetSystemDirectoryA
CloseHandle
WriteFile
CreateFileA
GlobalFindAtomA
WinExec
Sleep
GlobalAddAtomA
FindClose
FindNextFileA
FindFirstFileA
FreeLibrary
ResumeThread
ReadFile
GetFileSize
GetVersionExA
GetTickCount
TerminateThread
GetFileAttributesA
MoveFileExA
WritePrivateProfileStringA
GetShortPathNameA
GetFullPathNameA
GetModuleHandleA
GetStartupInfoA
lstrlenA
MultiByteToWideChar
RemoveDirectoryA
GetLocalTime
user32
GetForegroundWindow
SetWindowTextA
LoadIconA
FindWindowExA
SetTimer
SetWindowLongA
DrawIcon
GetSystemMetrics
IsIconic
SetParent
GetWindowTextA
IsWindowVisible
RegisterWindowMessageA
KillTimer
SendMessageA
PostQuitMessage
PtInRect
wsprintfA
SendNotifyMessageA
GetWindowRect
GetSysColor
EnableWindow
GetClientRect
FindWindowA
GetWindow
SendMessageTimeoutA
GetLastInputInfo
wsprintfW
GetParent
GetClassNameA
EnumWindows
GetWindowLongA
advapi32
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegEnumKeyExA
RegDeleteValueA
RegSetValueExA
RegQueryInfoKeyA
RegOpenKeyExA
shell32
ShellExecuteA
SHGetSpecialFolderPathA
ole32
CoInitialize
CoUninitialize
oleaut32
SysAllocStringLen
VariantInit
SysFreeString
SysAllocString
winmm
timeGetTime
Sections
.text Size: 116KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ