Static task
static1
Behavioral task
behavioral1
Sample
40679e7b2a24ce3d77c03cab6825afd3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
40679e7b2a24ce3d77c03cab6825afd3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40679e7b2a24ce3d77c03cab6825afd3_JaffaCakes118
-
Size
40KB
-
MD5
40679e7b2a24ce3d77c03cab6825afd3
-
SHA1
6d69883bbe07c5299d4bb451fde1b15e2043e089
-
SHA256
0cbaa8bd54a9e128b0d9ca8abc97625c6bfbfd6bbe0012597689786e7083900e
-
SHA512
48d855acff787c54e3dedd8a5039d71358e925fac61dbbc701b62c66c997c1bcc7681e86baa50745ded62fe83ddbaacd15b6811f2814b2b76da7ac548894887b
-
SSDEEP
384:Xd9gNeB1Gn3yRdYlr9EWvwsbsGmlBDAQ0F21xulpdGagoeraMDUdlCy:s4B1G3Yd2r9F490F21xOpUZollC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40679e7b2a24ce3d77c03cab6825afd3_JaffaCakes118
Files
-
40679e7b2a24ce3d77c03cab6825afd3_JaffaCakes118.exe windows:4 windows x86 arch:x86
75a7d49c62353af04c8e5efca4241a3b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
MultiByteToWideChar
WriteFile
VirtualFree
GetProcAddress
HeapDestroy
GetFileType
GetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
VirtualAlloc
GetStringTypeW
LoadLibraryA
CloseHandle
GetModuleFileNameA
CreateThread
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
HeapCreate
DeleteFileA
FreeEnvironmentStringsA
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
GetLastError
MoveFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
GetCPInfo
GetACP
GetOEMCP
UnhandledExceptionFilter
user32
LoadCursorA
RegisterClassA
DispatchMessageA
PostQuitMessage
DefWindowProcA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
LoadIconA
CloseWindow
MessageBoxA
BeginPaint
GetSysColor
EndPaint
GetSystemMetrics
CreateWindowExA
SendMessageA
gdi32
SelectObject
SetBkColor
ExtTextOutA
GetStockObject
advapi32
RegCreateKeyExA
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
shell32
ShellExecuteA
SHGetSpecialFolderPathA
ole32
OleInitialize
comctl32
InitCommonControlsEx
urlmon
URLDownloadToFileA
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ