Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_39b3fee2068eda51f03f77153f3c6a41.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_39b3fee2068eda51f03f77153f3c6a41.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_39b3fee2068eda51f03f77153f3c6a41
-
Size
165KB
-
MD5
39b3fee2068eda51f03f77153f3c6a41
-
SHA1
a6bd7d9b5fb11d626bb003b6938a391aa7165aed
-
SHA256
77526c7cbb2ae98f6497b75415607922f23165a765b0cda26f6ca9c4d2b13e93
-
SHA512
5cddd60a682450eefcf14b9c2ddbffcf952184324c164d965c541ac2226ca637fa91030cdb4b4cd8124f3364567074e0b81a14fa25c2be721b057559ad6180f6
-
SSDEEP
3072:gmaYFWGGuPbP8ltjBH3oJwWJKGmputhaHdDyV35+hR0gq+dUBgX3ae7Sz7sgpQ:cGxD8ltjBH3oJw0bUAkyVJ0R0f+b6OQX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_39b3fee2068eda51f03f77153f3c6a41
Files
-
JaffaCakes118_39b3fee2068eda51f03f77153f3c6a41.exe windows:4 windows x86 arch:x86
a2bcf2e338ff0b1aba054df6df80b3a5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DispatchMessageA
TranslateMessage
PostMessageA
SendMessageA
PeekMessageA
wsprintfA
kernel32
GetThreadLocale
ProcessIdToSessionId
GetCurrentProcess
DosPathToSessionPathW
InterlockedIncrement
GetDiskFreeSpaceExW
GetACP
GetCurrentThreadId
FreeLibrary
lstrlenA
InterlockedDecrement
GetProcessId
GetTickCount
WideCharToMultiByte
InitializeCriticalSection
SetProcessAffinityMask
QueryPerformanceCounter
CreateFileW
EnumResourceTypesA
GetLocalTime
WaitForSingleObject
GetVolumeInformationW
GetModuleFileNameA
GetLastError
GetFileSize
GetCurrentProcessId
GetLocaleInfoA
DisableThreadLibraryCalls
DeleteFileW
ExitProcess
InterlockedExchange
GetProcessAffinityMask
GetSystemTimeAsFileTime
MultiByteToWideChar
CloseHandle
GetVersionExA
DeleteCriticalSection
DeleteFileA
ole32
CoTaskMemFree
CoTaskMemAlloc
CoFreeUnusedLibraries
CoCreateInstance
StringFromGUID2
CoInitialize
CoUninitialize
advapi32
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueA
RegCreateKeyA
RegSetValueExA
RegCloseKey
gdiplus
GdipCreateHBITMAPFromBitmap
GdipCloneImage
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1024B - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ