Static task
static1
Behavioral task
behavioral1
Sample
39fc2ecfb7485b0b14b699a7bb85eda8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
39fc2ecfb7485b0b14b699a7bb85eda8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
39fc2ecfb7485b0b14b699a7bb85eda8_JaffaCakes118
-
Size
144KB
-
MD5
39fc2ecfb7485b0b14b699a7bb85eda8
-
SHA1
f86491aa23a0146492752f758d0a1e9cf2e7d521
-
SHA256
1600982456b6df622b83580eeae46c0a1a0f5ca3832beb39a8f85671ff275e0d
-
SHA512
05336bc2c0b96e798a029ea47fb463ce06d625ab189f59689f46ef9a51554f59e1a467371340e4666c637b8e6bc503f6789215faf277aecc99946e8e77b2a57c
-
SSDEEP
1536:nvISMM6khAqKSJ92rzewcQX36ESq+TeMAb91tiw/50E9/SjbsRbVK36XI6L9KoLl:vISrLKSJk+wj6ESqARwbc36XIM1l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39fc2ecfb7485b0b14b699a7bb85eda8_JaffaCakes118
Files
-
39fc2ecfb7485b0b14b699a7bb85eda8_JaffaCakes118.exe windows:4 windows x86 arch:x86
6f93e755c9076fa041a2402c46e78cde
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
OpenProcess
DuplicateHandle
GetCurrentProcess
WriteFile
CreateFileA
GetLastError
SetFileTime
GetProcAddress
Sleep
WinExec
GetModuleFileNameA
GetStartupInfoA
GetModuleHandleA
CloseHandle
GetSystemDirectoryA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetVersionExA
GetFileAttributesExA
user32
DispatchMessageA
GetDesktopWindow
TranslateMessage
GetMessageA
ShowWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
PostQuitMessage
advapi32
RegQueryValueExA
OpenSCManagerA
OpenServiceA
StartServiceA
CloseServiceHandle
LookupAccountNameA
GetUserNameA
RegCloseKey
RegOpenKeyExA
CreateServiceA
DeleteService
ConvertSidToStringSidA
shlwapi
SHDeleteKeyA
SHSetValueA
msvcrt
_exit
_stricmp
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
rand
sprintf
strstr
_access
_except_handler3
srand
time
??3@YAXPAX@Z
??2@YAPAXI@Z
fclose
fflush
fwrite
fopen
_XcptFilter
exit
_acmdln
__getmainargs
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
dbghelp
ImageNtHeader
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
edata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cdata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idata Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ