Static task
static1
Behavioral task
behavioral1
Sample
39d521d1e1f0ffc4bd8fccd887f21e08_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
39d521d1e1f0ffc4bd8fccd887f21e08_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
39d521d1e1f0ffc4bd8fccd887f21e08_JaffaCakes118
-
Size
131KB
-
MD5
39d521d1e1f0ffc4bd8fccd887f21e08
-
SHA1
034c460615813997367135d5570302a9ed4c3ccc
-
SHA256
7860d9027b88a59b59d3cd296e38d32cb8ecf3750a94552d5e69a373286764ce
-
SHA512
53f118d870c57f6768952f2f7dbc672d058c3fca169025caf1a9e7ec73997e2ed9fe5470bb46dfc19295dd85a209dbbb8f8bb2d9ab1cd3f3ada3cbb6e459851a
-
SSDEEP
1536:W/igZwuYLByBhk4/rQBk4b/8d1d00sZI5tDmTXs2Qh+NV8ITnGz7fGJ1F3O:WKgZwPBkSAMud1inZItCEh+fSf81Fe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39d521d1e1f0ffc4bd8fccd887f21e08_JaffaCakes118
Files
-
39d521d1e1f0ffc4bd8fccd887f21e08_JaffaCakes118.exe windows:4 windows x86 arch:x86
cf748465a4bc6178390092672690a0b9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CreateProcessA
GetStartupInfoA
CopyFileA
DeleteFileA
GetTickCount
CloseHandle
WriteFile
GetFileSize
SetEndOfFile
CreateFileA
DeleteCriticalSection
GetProfileStringW
VirtualProtect
lstrlenA
lstrcmpA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
ReadFile
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
FlushFileBuffers
SetStdHandle
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetStringTypeW
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
GetLastError
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
user32
SetWindowTextA
SetCursor
InsertMenuItemA
SetDlgItemInt
SetForegroundWindow
CheckRadioButton
SendDlgItemMessageA
SendMessageA
IsDialogMessageA
LoadBitmapA
CheckDlgButton
SendMessageTimeoutA
DestroyWindow
GetIconInfo
SetClipboardData
GetDlgItemInt
ws2_32
gethostname
getsockname
htons
socket
shutdown
setsockopt
sendto
gethostbyname
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 794KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ