Static task
static1
Behavioral task
behavioral1
Sample
40ab75a2a71188ebe4312254e626adf6_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
40ab75a2a71188ebe4312254e626adf6_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
40ab75a2a71188ebe4312254e626adf6_JaffaCakes118
-
Size
69KB
-
MD5
40ab75a2a71188ebe4312254e626adf6
-
SHA1
07b04f08ce97d9c24025f37c6051b0a4a69d9a07
-
SHA256
10de23ebd70a28758b6742a20590b582c8d2b78b6de63088f434b843d905c3d7
-
SHA512
640d4c83828273cf898f549bae260e0c462a32fff6e6670da1aec5b3e0279dc259cb74873bf06ae679f13555af703efcc0469ff712266f966d9d14fc9fd29621
-
SSDEEP
768:klYt6VSPLy0RYakfqDLRZveTWrFRBNp8C2l9a7WZ1ZdrZehWI2t7uQWiooG7Cfs1:Zt/TkEZMKFrNmf9aqTZd4hWXViwR60
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40ab75a2a71188ebe4312254e626adf6_JaffaCakes118
Files
-
40ab75a2a71188ebe4312254e626adf6_JaffaCakes118.exe windows:4 windows x86 arch:x86
8a19d13df7c3a4439380243c60b3f4fc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringA
FileTimeToLocalFileTime
CloseHandle
GetFileInformationByHandle
CreateFileA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetFileAttributesA
CreateDirectoryA
LocalAlloc
LocalFree
ReadFile
WriteFile
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
GetCommandLineA
GetVersion
GetLastError
DeleteFileA
HeapCreate
MultiByteToWideChar
FileTimeToDosDateTime
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
GetProcAddress
LoadLibraryA
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
HeapReAlloc
SetConsoleMode
ReadConsoleInputA
GetConsoleMode
Sections
.text Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 951B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ