Static task
static1
Behavioral task
behavioral1
Sample
39a91c6c4b2d2af1993faffcc72d76ff_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
39a91c6c4b2d2af1993faffcc72d76ff_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
39a91c6c4b2d2af1993faffcc72d76ff_JaffaCakes118
-
Size
715KB
-
MD5
39a91c6c4b2d2af1993faffcc72d76ff
-
SHA1
a2f1ac7ff0e425d7fb5b4326abf71e8d7a175991
-
SHA256
cd31d9d03cea9a48d45507c5e9d8ea3383b4e889b80bf76715a54bd8800b5641
-
SHA512
bf03424001c3ac99775ee4ce0a3349c7678f0a3e0b8e6dec633bd92b4535f55f6310ac361cc2228bec4d254c30e108bbf7a08c49a52d522b9ef014c0c3826043
-
SSDEEP
12288:zDGT+i58BIBzm2o5XDc8v86yNFFaTQNKXptAKQ3NFLHpRnB:zDGJ58+7o5XDc8vxyha7Z+3B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39a91c6c4b2d2af1993faffcc72d76ff_JaffaCakes118
Files
-
39a91c6c4b2d2af1993faffcc72d76ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
555de21b3348d682202d72b48fea05a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
GetOEMCP
VirtualAlloc
FindResourceA
VirtualFree
WriteFile
UnmapViewOfFile
GetEnvironmentStrings
GetModuleHandleW
GetACP
lstrcpynA
CloseHandle
ReadFile
SetFilePointer
TlsFree
GetConsoleMode
RaiseException
InterlockedCompareExchange
HeapSize
GetCPInfo
GetCommandLineW
LockResource
SizeofResource
lstrlenW
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
LCMapStringA
GlobalFree
lstrlenA
GetSystemInfo
HeapCreate
LCMapStringW
LoadLibraryExW
LeaveCriticalSection
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
Sleep
RemoveDirectoryA
GetProcAddress
FindFirstFileW
CreateFileMappingA
FindFirstFileA
CreateProcessA
CompareStringW
GlobalLock
SetEvent
GetWindowsDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
HeapAlloc
QueryPerformanceCounter
GetExitCodeProcess
lstrcmpiA
SetHandleCount
EnterCriticalSection
InterlockedIncrement
GetLocaleInfoA
SetEndOfFile
GlobalAlloc
WriteConsoleA
TerminateProcess
GetSystemDirectoryA
SetUnhandledExceptionFilter
CreateThread
CreateMutexA
GetLocalTime
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
GetPrivateProfileStringA
GetModuleFileNameA
FlushFileBuffers
IsDebuggerPresent
GetModuleFileNameW
SetLastError
OutputDebugStringA
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
LocalFree
FreeLibrary
GetFullPathNameA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
InterlockedExchange
GetStringTypeA
WideCharToMultiByte
GetTempPathA
SetStdHandle
FreeEnvironmentStringsW
LocalAlloc
GetCurrentProcess
DeleteCriticalSection
GetFileAttributesW
HeapFree
HeapDestroy
WaitForSingleObject
GetFileAttributesA
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
GetCurrentThreadId
ExitProcess
GetModuleHandleA
GetCommandLineA
GetTickCount
GetVersion
GetLastError
GetCurrentThread
TlsAlloc
GetCurrentProcessId
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
user32
SendMessageA
InvalidateRect
GetSysColor
MessageBoxA
LoadIconA
ScreenToClient
GetDlgItem
wsprintfA
SetWindowTextA
EndDialog
SetWindowLongA
PostMessageA
GetWindowRect
DefWindowProcA
BeginPaint
GetSubMenu
RegisterClassA
EnableMenuItem
GetWindow
IsWindowEnabled
TranslateMessage
ShowWindow
GetParent
DestroyWindow
GetKeyState
GetClientRect
UnregisterClassA
GetCursorPos
GetDC
PeekMessageA
GetWindowLongA
EndPaint
DispatchMessageA
IsWindow
SetWindowPos
PostQuitMessage
SetForegroundWindow
SetCursor
ReleaseDC
GetFocus
CallWindowProcA
DrawTextA
version
GetFileVersionInfoA
VerQueryValueA
gdi32
GetDeviceCaps
SetTextColor
SetBkMode
CreateCompatibleDC
Sections
.text Size: 669KB - Virtual size: 995KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ