Static task
static1
Behavioral task
behavioral1
Sample
39e115bd660902703ad7cd6c3a577a06_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
39e115bd660902703ad7cd6c3a577a06_JaffaCakes118
-
Size
29KB
-
MD5
39e115bd660902703ad7cd6c3a577a06
-
SHA1
21c96cb3ae0f7abcb8b25ff4d00929ea898699e3
-
SHA256
8be8e542c6548c077f18a75512c498a28ff82a491af1b5e6572176835c5761ad
-
SHA512
861e1d62299c7a5fb9d3d7e1eb1ff5a8bfcf6e6bfa501e227121abda660e9d2df14367c1c04c943f1240da1170453d3c6067f5b6f7a41bd52b2d1479292b26ab
-
SSDEEP
384:e+WR2QABFIYYJEgCUClOZrgG2D2Wo28logq+tJwqtu5C6mgmlAmgkHiop:zWAQABFXYJEgCUkOR2D2WoeqcK4CLxN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39e115bd660902703ad7cd6c3a577a06_JaffaCakes118
Files
-
39e115bd660902703ad7cd6c3a577a06_JaffaCakes118.exe windows:4 windows x86 arch:x86
8ae3b4423c5b3e67a9188c65527dfd09
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCreateKeyExA
LookupAccountNameW
RegSetValueExA
RegCloseKey
kernel32
GetTickCount
GetSystemTime
LoadResource
LockResource
GetFileType
GetCPInfo
HeapCreate
GetStartupInfoA
VirtualProtect
GetSystemInfo
LeaveCriticalSection
GetSystemInfo
ExitThread
GetLocaleInfoA
TlsGetValue
OutputDebugStringA
CloseHandle
GetExitCodeProcess
SizeofResource
TlsFree
VirtualAlloc
CreateProcessA
FindResourceA
GetCurrentProcessId
SetFilePointer
CompareStringW
HeapDestroy
RemoveDirectoryA
CreateFileA
GetCurrentThreadId
WaitForSingleObject
GetStdHandle
GetSystemTimeAsFileTime
DeleteCriticalSection
WriteFile
CreateDirectoryA
SetHandleCount
GetVersionExA
VirtualQuery
EnterCriticalSection
CopyFileA
TlsSetValue
HeapAlloc
SetEnvironmentVariableA
VirtualFree
CreateThread
IsBadWritePtr
HeapFree
HeapReAlloc
GetSystemDirectoryA
GetOEMCP
GetWindowsDirectoryW
GetACP
GetCurrentProcess
DeleteFileA
CompareStringA
ole32
OleCreateEx
winspool.drv
ConfigurePortA
Sections
.dotfix Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
xt695rze Size: 13KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ