Static task
static1
Behavioral task
behavioral1
Sample
39ee54ab7699f8551c161f3a7dec3b61_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
39ee54ab7699f8551c161f3a7dec3b61_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
39ee54ab7699f8551c161f3a7dec3b61_JaffaCakes118
-
Size
144KB
-
MD5
39ee54ab7699f8551c161f3a7dec3b61
-
SHA1
9b3d33b7189306f35dd08d71c6b2dd8f2ff0e2a2
-
SHA256
cdab6a1edba8b540ae7d6406cfad4f8ce0f2a6b8eb260a396d51e50a337c30c9
-
SHA512
f90d94b119acc79dca3a49c246d0eb43bbf990e6fe25dbe4ac82807127f847c59574f4ef22ad13bc8f8f32a6a2c22c36973073df2de0374e787f2d1459481ddd
-
SSDEEP
3072:07RSLsJ3o/Pbxbk8asiW/45UsL+mQssFnX1W+O4IViYG7h:xqoLtk8asiW/41CTssFFJIVU7h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39ee54ab7699f8551c161f3a7dec3b61_JaffaCakes118
Files
-
39ee54ab7699f8551c161f3a7dec3b61_JaffaCakes118.exe windows:4 windows x86 arch:x86
570affad47c62a07ba5e09c32a407c6c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
RpcBindingSetAuthInfoA
RpcStringBindingComposeA
NdrClientCall
RpcBindingFromStringBindingA
RpcStringFreeA
user32
SetTimer
KillTimer
DispatchMessageA
GetWindowTextA
IsWindowVisible
GetMessageA
LoadStringA
wsprintfW
CharUpperA
PeekMessageA
PostThreadMessageA
EnumWindows
MessageBoxA
CharNextA
GetWindowThreadProcessId
wsprintfA
kernel32
ReadProcessMemory
CreateProcessW
ClearCommError
SetFilePointer
GetStartupInfoA
MapViewOfFile
ClearCommError
CreateFileMappingA
ExitProcess
FindFirstFileA
GetExitCodeProcess
DuplicateHandle
EnumResourceNamesW
UnmapViewOfFile
ReadFile
SetLastError
FindResourceExA
ExitProcess
CreateMutexA
GetModuleFileNameW
ReleaseMutex
FindClose
QueryPerformanceCounter
LocalSize
shlwapi
PathFindExtensionA
Sections
.text Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rscr Size: 512B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ