Static task
static1
Behavioral task
behavioral1
Sample
39de321b36e56e149433b9d301188d80_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
39de321b36e56e149433b9d301188d80_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
39de321b36e56e149433b9d301188d80_JaffaCakes118
-
Size
53KB
-
MD5
39de321b36e56e149433b9d301188d80
-
SHA1
857021938fdf372a9776fae65107e7395ca2ed98
-
SHA256
58df6eb415f7e90f74c859abc00eb60a8e015da675ec53cb73edba58ba484869
-
SHA512
f0da1e112d09dc44f8c353ef9df56d25660c94d4d66b8f7452a2c6afc98eb2eb31fe9b48bc95788860050ed22c7eaa1843ada3b47550fd26c19172dc083bbdef
-
SSDEEP
1536:aJUwMdipUMrF97W0RkoeNfVwrrIEHzJBOp/UvFI:aJrMyhRpehqoSzHw/3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39de321b36e56e149433b9d301188d80_JaffaCakes118
Files
-
39de321b36e56e149433b9d301188d80_JaffaCakes118.exe windows:5 windows x86 arch:x86
14656e351c2621612f781ff4e5917f63
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
kernel32
GetFileTime
shlwapi
PathFileExistsW
PathMatchSpecW
SHDeleteKeyA
StrCmpNIW
StrStrW
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW
user32
CloseWindowStation
DispatchMessageA
EndDialog
ExitWindowsEx
GetClassNameA
GetForegroundWindow
GetWindowTextA
GetWindowThreadProcessId
PeekMessageA
SetThreadDesktop
Sections
.mlcj Size: 43KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pmlur Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tyv Size: 6KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ