Static task
static1
Behavioral task
behavioral1
Sample
39df7e213e40b483df26d5e9ae1931aa_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
39df7e213e40b483df26d5e9ae1931aa_JaffaCakes118
-
Size
361KB
-
MD5
39df7e213e40b483df26d5e9ae1931aa
-
SHA1
4c4e39cf07a5fd14441d595f30578ace3a1222df
-
SHA256
e6bd2a1a130561f170508d9ae06968f66224b22e65289159f5bfef6ef218e39a
-
SHA512
ee64d1e657ce5023d2e0e3e285a789899fbe53b5478edead2ce14255ffbef29e0c6b3e98a7a4bf321c63d15c4f584bb564d419b8c78803918e3ab73ec285e7a8
-
SSDEEP
6144:1jWErhThujh1xbghkRxTzUMTw7qlXWoZ/8kmpLRQSIqnD9Mgh7e+fiSkdRiTY:1jHht4xUhIRzgqVWzfdph7VqRRD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39df7e213e40b483df26d5e9ae1931aa_JaffaCakes118
Files
-
39df7e213e40b483df26d5e9ae1931aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
5634279aeb096ce215079342c7625286
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
fseek
ftell
fread
fabs
ceil
malloc
floor
free
fclose
strcmp
memmove
strlen
kernel32
GetModuleHandleA
HeapCreate
CloseHandle
HeapDestroy
ExitProcess
LoadLibraryA
GetProcAddress
HeapAlloc
HeapFree
FreeLibrary
TlsAlloc
GetVersionExA
InitializeCriticalSection
GetModuleFileNameA
EnterCriticalSection
HeapReAlloc
LeaveCriticalSection
TlsGetValue
TlsSetValue
WaitForMultipleObjects
GetCurrentThreadId
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
CreateThread
ReleaseSemaphore
user32
CallWindowProcA
ShowCursor
DestroyWindow
InvalidateRect
ShowWindow
BeginPaint
EndPaint
DefWindowProcA
LoadIconA
RegisterClassExA
CreateWindowExA
DestroyIcon
FillRect
gdi32
GetStockObject
GetObjectType
DeleteObject
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel
winmm
timeEndPeriod
Sections
.code Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 277B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zaer Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ