Static task
static1
Behavioral task
behavioral1
Sample
39e94fb21d0b4f222988f14ec9fcbf3d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
39e94fb21d0b4f222988f14ec9fcbf3d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
39e94fb21d0b4f222988f14ec9fcbf3d_JaffaCakes118
-
Size
92KB
-
MD5
39e94fb21d0b4f222988f14ec9fcbf3d
-
SHA1
71dc753b577398cc589e10cc7cda6d22194e764e
-
SHA256
2d4f797a6326cbdee545f07003f476def2c6b6e88943df429bd1671fcf962f31
-
SHA512
dee4f728ad3bfe20186b1da5c62037ff5f3e59ec7dd61bae4ffca2e03fb637ecf23f34455544cacf1cf1a2f3710a1e50126df76e8d7b60d7adcf73123a825140
-
SSDEEP
1536:FyeIkiqWRgWPc49ZTHQb7239u5w0it92FJ8DW/8x86KevX2yQ5R/ok:FyeYLRgCtAa3YE2FDb6nvX2N5Gk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39e94fb21d0b4f222988f14ec9fcbf3d_JaffaCakes118
Files
-
39e94fb21d0b4f222988f14ec9fcbf3d_JaffaCakes118.exe windows:4 windows x86 arch:x86
d47cc45f94090dc489d406a5b9fa7dfa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
mpr
WNetGetUserA
wsock32
WSACleanup
shell32
ShellExecuteA
wininet
InternetReadFile
ws2_32
WSAIoctl
Sections
.text Size: 86KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE