Static task
static1
Behavioral task
behavioral1
Sample
39ed141c328734b67e021b6d18aacda3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
39ed141c328734b67e021b6d18aacda3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
39ed141c328734b67e021b6d18aacda3_JaffaCakes118
-
Size
292KB
-
MD5
39ed141c328734b67e021b6d18aacda3
-
SHA1
1e2e2afafd78ce3d65e414ef86c4a4ef094b45be
-
SHA256
2f3f1ac22fdb163dbbba72a275cab8dccd542fdc2f6fa04c81f741c82b79b218
-
SHA512
62da995a5da74cad69c0801ab2c4357d6ecea74f37d00aafafe57697085dd87f1ee8a1c03a3ae3b9e896460e9c9b80e2d29c611027fa7e233bcafc855880063b
-
SSDEEP
6144:zjFqrwkuLoIgAD0XI4l2B3m2aKWPQY+b0CU/mWTMx0KwKf9:zAoLo1AD8bl2B0P9+IuSzc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39ed141c328734b67e021b6d18aacda3_JaffaCakes118
Files
-
39ed141c328734b67e021b6d18aacda3_JaffaCakes118.exe windows:4 windows x86 arch:x86
92244bce9b5b36d679472866bdd31dc0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MapDialogRect
LookupIconIdFromDirectoryEx
IsDlgButtonChecked
DdeAccessData
TranslateMDISysAccel
InvalidateRgn
RegisterWindowMessageA
RegisterClassA
CharToOemBuffA
ChildWindowFromPointEx
SetDlgItemTextA
CharNextA
TabbedTextOutW
RegisterClassExA
InsertMenuW
GetActiveWindow
FreeDDElParam
CreateAcceleratorTableW
BringWindowToTop
MessageBoxW
ScrollWindowEx
SendInput
CreateDialogIndirectParamW
SetWindowPos
ReplyMessage
GetScrollInfo
comctl32
ImageList_GetImageCount
ImageList_GetFlags
CreateStatusWindowW
DrawInsert
ImageList_Read
ImageList_Merge
ImageList_SetBkColor
ImageList_LoadImageW
ImageList_EndDrag
CreateUpDownControl
CreateMappedBitmap
ImageList_SetIconSize
ImageList_SetImageCount
ImageList_GetIconSize
InitCommonControlsEx
comdlg32
PrintDlgA
ChooseColorA
kernel32
HeapDestroy
GetModuleHandleA
GetSystemTime
SetStdHandle
CompareStringW
SetHandleCount
LoadLibraryExA
GetStringTypeW
CreateFileMappingA
GetLongPathNameA
GetExitCodeThread
GetStringTypeA
TlsSetValue
GetEnvironmentStringsW
CompareStringA
GetLocaleInfoW
GetModuleFileNameW
LCMapStringW
GetComputerNameW
MultiByteToWideChar
LCMapStringA
TlsAlloc
LeaveCriticalSection
VirtualQuery
TlsFree
TlsGetValue
ExitProcess
CommConfigDialogA
LocalUnlock
GetVersion
GetModuleFileNameA
HeapReAlloc
GetStdHandle
VirtualFree
LoadLibraryA
HeapAlloc
WriteConsoleA
WriteFile
RtlUnwind
GetCurrentThreadId
GetEnvironmentStrings
ReadFile
GetCPInfo
GetTimeZoneInformation
SetEnvironmentVariableA
QueryPerformanceCounter
SetConsoleScreenBufferSize
InterlockedDecrement
FlushFileBuffers
GetTempFileNameA
FreeEnvironmentStringsA
GetCurrentProcess
GetSystemDirectoryW
DeleteCriticalSection
OpenMutexA
CloseHandle
CreateProcessA
GetCommandLineA
InitializeCriticalSection
Sleep
EnterCriticalSection
FormatMessageW
GetCurrentProcessId
SetLastError
GetPrivateProfileStringW
IsBadWritePtr
GetLocalTime
TerminateProcess
GetLastError
InterlockedExchange
CreateMutexA
VirtualAlloc
GetTickCount
GetSystemTimeAsFileTime
HeapFree
InterlockedIncrement
GetCurrentThread
SetLocaleInfoA
FindResourceA
HeapCreate
FreeEnvironmentStringsW
GetFileType
WideCharToMultiByte
UnhandledExceptionFilter
GetStartupInfoA
SetFilePointer
GetProcAddress
GetCommandLineW
GetStartupInfoW
gdi32
Pie
PolyBezierTo
GetDeviceGammaRamp
GetCharABCWidthsA
SetBkColor
GetBkMode
DeleteObject
DeleteDC
GetEnhMetaFileDescriptionA
Sections
.text Size: 184KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ