Static task
static1
Behavioral task
behavioral1
Sample
39e268798a2bbf54d287f809ff30d0e3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
39e268798a2bbf54d287f809ff30d0e3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
39e268798a2bbf54d287f809ff30d0e3_JaffaCakes118
-
Size
29KB
-
MD5
39e268798a2bbf54d287f809ff30d0e3
-
SHA1
12c589a3bbeec955f2f0fef501d0587900c9f2a4
-
SHA256
1c58a4edd0f548ed1e6850c45d4ba9e968dcf49b617541b18bba53ff4af6075d
-
SHA512
db772f2f5efe7bf281f6eda75cdbb542ce04046eb414f87c4df04014facf5a8e679193a5a5f0d67db11b5c2f4f333e80516e42579814367c2936d529a3325e0f
-
SSDEEP
384:BxLjNKiRWfgcrvOTwd6UdfLEJKeKvKyKox7TPx9IQmpyd6G+SLdnjZDI0tiYMACW:Bq13rvkNJ5KlK23dnVDIaiYvUM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39e268798a2bbf54d287f809ff30d0e3_JaffaCakes118
Files
-
39e268798a2bbf54d287f809ff30d0e3_JaffaCakes118.exe windows:4 windows x86 arch:x86
9cfad5efa41b185e822119ec7b830b4b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
OpenEventA
GetFileAttributesA
GetTempPathA
GetLastError
WriteFile
CreateFileA
FreeLibrary
GetLocalTime
FileTimeToSystemTime
GetModuleFileNameA
lstrcatA
WaitForSingleObject
DeleteFileA
ExitThread
TerminateThread
ResetEvent
WaitForMultipleObjects
lstrcmpA
CreateToolhelp32Snapshot
Process32First
CompareStringA
lstrcpyA
FindResourceA
LoadResource
GetTickCount
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
CloseHandle
Sleep
lstrlenA
MultiByteToWideChar
LoadLibraryA
CreateThread
CreateEventA
OpenProcess
TerminateProcess
ExitProcess
ReadFile
HeapFree
HeapAlloc
RtlUnwind
user32
SetWindowTextA
GetParent
ShowWindow
PeekMessageA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
RegisterClassA
CreateWindowExW
DefWindowProcA
PostQuitMessage
CreateWindowExA
CharToOemA
DestroyWindow
MessageBoxA
LoadIconA
FindWindowA
wsprintfW
wsprintfA
advapi32
RegEnumKeyA
RegDeleteValueA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyA
RegSetValueExW
RegOpenKeyA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegNotifyChangeKeyValue
shell32
ShellExecuteA
SHGetFolderPathA
Shell_NotifyIconA
ole32
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
SysAllocString
SysFreeString
wininet
InternetGetConnectedState
HttpQueryInfoA
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ