Static task
static1
Behavioral task
behavioral1
Sample
40b21583794a5c784b260a69c3904a00_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
40b21583794a5c784b260a69c3904a00_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40b21583794a5c784b260a69c3904a00_JaffaCakes118
-
Size
599KB
-
MD5
40b21583794a5c784b260a69c3904a00
-
SHA1
791b3d0881bec74b87ec58826de888b10c4fa719
-
SHA256
9b841b72b077ed9c97dc068830caec1e913782e6cf26d7016e92304a691036c6
-
SHA512
065ed36c44ca58d5ff24c2d2506e484c3bb6facd1be16025258e0b45cd395331661d5f7cf13ff472f5402a9ea310cdfd1209fdbf58001f4c2a062729ca0c1e49
-
SSDEEP
12288:FD5y6rgYrcZOz/Z70VBzR2HTm6O/LikRYKuVC1YCtnNyiTp3u:F9yYgDUz/ZyBVY5O/LikRFuVCvHC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40b21583794a5c784b260a69c3904a00_JaffaCakes118
Files
-
40b21583794a5c784b260a69c3904a00_JaffaCakes118.exe windows:4 windows x86 arch:x86
b06431bebf712f6dc8f9f4979a052e17
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawTextExW
SetCaretBlinkTime
GetMessageTime
GetDlgCtrlID
DispatchMessageA
AnyPopup
DrawAnimatedRects
CreateMDIWindowW
UpdateWindow
DlgDirListW
CallMsgFilterW
CallMsgFilter
CharLowerBuffW
RegisterClassA
SendDlgItemMessageW
CharUpperW
GetClassWord
BlockInput
SetScrollRange
IsMenu
DdeDisconnect
DrawTextExA
CreateAcceleratorTableW
GrayStringA
IsWindowUnicode
RegisterClassExA
SendMessageW
IsCharAlphaA
ChildWindowFromPoint
GetSystemMetrics
CreateWindowExW
CharLowerBuffA
LockWindowUpdate
IsCharLowerW
EnumDesktopWindows
LoadImageA
DdeNameService
WaitForInputIdle
GetSysColor
RealGetWindowClass
DdeGetLastError
ShowWindow
ImpersonateDdeClientWindow
SetMenuItemBitmaps
DefWindowProcA
LoadIconA
CharLowerA
SetWindowsHookExW
MapDialogRect
IsDlgButtonChecked
FindWindowA
GetUpdateRgn
PostQuitMessage
SetMenuInfo
GetActiveWindow
DestroyWindow
IsClipboardFormatAvailable
FrameRect
DdeQueryNextServer
CheckRadioButton
GetCaretPos
DdeFreeDataHandle
GetFocus
CreateCaret
GetDoubleClickTime
DrawCaption
LoadMenuA
MessageBoxA
kernel32
CreateProcessA
GetUserDefaultLCID
VirtualAlloc
GetEnvironmentStringsW
IsValidLocale
ReadConsoleOutputCharacterA
GetLogicalDriveStringsW
GetStringTypeA
TerminateProcess
CloseHandle
GetLocaleInfoW
CommConfigDialogW
CompareStringA
InitializeCriticalSection
HeapSize
GetProfileIntA
LocalHandle
LoadResource
AddAtomA
EnumSystemLocalesA
LeaveCriticalSection
ReadConsoleOutputCharacterW
CreateDirectoryExA
SetLastError
GetModuleFileNameA
GetCommandLineA
EnumResourceLanguagesW
GetCommandLineW
IsValidCodePage
SetComputerNameA
GetDateFormatA
RtlUnwind
SetHandleCount
VirtualQuery
GetTimeZoneInformation
InterlockedExchange
CreateMutexW
MultiByteToWideChar
SetPriorityClass
LocalFlags
EnumTimeFormatsW
CreateDirectoryW
LockResource
SystemTimeToFileTime
GetStringTypeW
GetSystemDirectoryA
GetEnvironmentStrings
SetEndOfFile
FindFirstFileExW
GlobalSize
LocalFree
FreeEnvironmentStringsW
GetProcessAffinityMask
GetSystemInfo
TlsAlloc
GetVersionExA
GetStartupInfoA
SetConsoleTitleW
GetModuleHandleA
GetProcAddress
FlushFileBuffers
DosDateTimeToFileTime
GetStdHandle
LoadLibraryA
CompareStringW
OpenMutexA
SetWaitableTimer
HeapAlloc
MoveFileW
FindAtomA
GetCurrentThreadId
CreateMutexA
HeapFree
HeapCreate
GetModuleFileNameW
DeleteAtom
UnhandledExceptionFilter
WideCharToMultiByte
GetTempPathA
InterlockedDecrement
GetExitCodeThread
GetCurrentThread
VirtualFree
FreeEnvironmentStringsA
SetFileAttributesA
ReadFile
TlsFree
GetOEMCP
TlsGetValue
GetTickCount
CreateNamedPipeW
GetCurrentProcess
IsBadWritePtr
WriteConsoleOutputCharacterA
CreateMailslotA
EnumResourceTypesA
SetEnvironmentVariableA
DeleteCriticalSection
TlsSetValue
GetCPInfo
GetLastError
SetStdHandle
LCMapStringW
ExitProcess
GetSystemTimeAsFileTime
GetFileType
SleepEx
VirtualProtect
LCMapStringA
HeapReAlloc
LockFile
QueryPerformanceCounter
GetTimeFormatA
GetCurrentProcessId
EnterCriticalSection
EnumDateFormatsA
GetACP
GetStartupInfoW
SetConsoleWindowInfo
WriteConsoleOutputAttribute
SetFilePointer
GetLocaleInfoA
GlobalLock
WriteFile
HeapDestroy
comctl32
ImageList_Draw
InitCommonControlsEx
ImageList_SetFlags
ImageList_BeginDrag
ImageList_AddMasked
DestroyPropertySheetPage
ImageList_Create
Sections
.text Size: 165KB - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 258KB - Virtual size: 258KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 109KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ