Static task
static1
Behavioral task
behavioral1
Sample
39114c7f8d1f76cdcc90f45d619a77b2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
39114c7f8d1f76cdcc90f45d619a77b2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
39114c7f8d1f76cdcc90f45d619a77b2_JaffaCakes118
-
Size
280KB
-
MD5
39114c7f8d1f76cdcc90f45d619a77b2
-
SHA1
c80055ce0b8bb9764ed1ac76eadcb610c78e0991
-
SHA256
db1c6c6f2550f7060c3b5a946e8beeb505802089db905bf13d88a012cb70d1da
-
SHA512
9eee648b9a169c95329e7f8f74fe1ecfa219bdfd0bd2107995635fbc5755c300faeff4204ccd404e114456999330d1672c5a4519af214903f52147e47c2c6031
-
SSDEEP
3072:NcwZstWwAMqWWbOwuTVY+5ho559nnZzV3F7ygF1b1rJ56pUAasE26bGEKKRbMKeK:NCtCmQSY+5+7FHF1P56iPp2Hcm9Thg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39114c7f8d1f76cdcc90f45d619a77b2_JaffaCakes118
Files
-
39114c7f8d1f76cdcc90f45d619a77b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
734d0158f7d386e3f8fe7cef3536fed1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
GetFileType
HeapDestroy
SetHandleCount
GetEnvironmentStringsW
HeapCreate
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
VirtualFree
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
GetLastError
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
HeapReAlloc
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCurrentProcess
SizeofResource
GetTickCount
GlobalAlloc
WinExec
LocalFree
LocalUnlock
LocalLock
LocalAlloc
_lclose
GlobalReAlloc
OpenFile
GetTempFileNameA
GetTempPathA
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
CloseHandle
UnmapViewOfFile
ReadFile
WideCharToMultiByte
UnhandledExceptionFilter
GetModuleFileNameA
HeapSize
SetStdHandle
GlobalUnlock
TerminateProcess
FreeResource
HeapAlloc
HeapFree
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
RtlUnwind
GlobalLock
MulDiv
FindResourceA
LoadResource
LockResource
GlobalFree
GetStringTypeW
SetFilePointer
DeleteFileA
FlushFileBuffers
SetEndOfFile
user32
GetParent
GetForegroundWindow
PostQuitMessage
GetWindow
DefWindowProcA
GetWindowLongA
FillRect
SetFocus
SendDlgItemMessageA
GetDlgItem
SetDlgItemTextA
GetDlgItemTextA
UnionRect
GetClassNameA
EqualRect
UpdateWindow
IsRectEmpty
GetUpdateRect
IsWindowVisible
EnumWindows
SetCursor
KillTimer
GetDesktopWindow
MessageBoxA
BeginPaint
SetClassWord
DestroyCursor
EndDialog
GetClientRect
MoveWindow
DialogBoxParamA
LoadIconA
RegisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
SetWindowPos
CreateWindowExA
DestroyWindow
FindWindowA
GetDC
ReleaseDC
CopyRect
SetRectEmpty
OffsetRect
PostMessageA
IntersectRect
SetRect
SetWindowLongA
GetAsyncKeyState
EndPaint
LoadCursorA
GetCursorPos
PtInRect
InvalidateRect
SetTimer
IsWindow
GetWindowRect
gdi32
GetDeviceCaps
BitBlt
DeleteDC
SelectObject
CreateCompatibleDC
CreateRectRgnIndirect
SetRectRgn
SelectClipRgn
CreateSolidBrush
DeleteObject
RealizePalette
SelectPalette
GetObjectA
SetBkColor
SetMapMode
GetMapMode
CreateBitmap
GetPixel
SetTextColor
SetBkMode
TextOutA
GetTextExtentPoint32A
GetStockObject
CreatePalette
CreateFontIndirectA
CreateDIBitmap
CreateCompatibleBitmap
winmm
mciSendCommandA
sndPlaySoundA
comdlg32
GetSaveFileNameA
shell32
ShellExecuteA
Sections
.text Size: 76KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 180KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ