Static task
static1
Behavioral task
behavioral1
Sample
39ec090625201ef99af85dda7768c91f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
39ec090625201ef99af85dda7768c91f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
39ec090625201ef99af85dda7768c91f_JaffaCakes118
-
Size
136KB
-
MD5
39ec090625201ef99af85dda7768c91f
-
SHA1
70ec38ccef9156ff07c04e396223d914c40f668b
-
SHA256
4692cea56302bb4c4afe46ca87b720a83b55cfcebf3ae614893b239ecf181f0c
-
SHA512
b1d9651b1f41e6a5ea8e6d0243867cce15fd6977d20d27a6dbd060cbe17ed78d71739fc405f05d2b8d93d2125f187bf38333952606394c1c2a03ac67962cf7b6
-
SSDEEP
1536:zb0m8NGLF5mZQ/tkDsxWqy+JSm4qW2mbQp0GrKI45AxM1jf9dwSV9ssHvkxYpgI0:zbeGzmu/tkcyVDqr0qDS7fwSsmHU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39ec090625201ef99af85dda7768c91f_JaffaCakes118
Files
-
39ec090625201ef99af85dda7768c91f_JaffaCakes118.exe windows:4 windows x86 arch:x86
92b94f161d43d11b43a28691ed8a9d63
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CreateMutexA
GetLastError
OutputDebugStringA
CloseHandle
LCMapStringW
LCMapStringA
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
RaiseException
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetFilePointer
GetCPInfo
FlushFileBuffers
advapi32
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
msi
ord141
ord204
ord67
ord95
ord144
ord8
ord15
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.isxdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE