Static task
static1
Behavioral task
behavioral1
Sample
40a0d36a5c36840df700391a77802440_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
40a0d36a5c36840df700391a77802440_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40a0d36a5c36840df700391a77802440_JaffaCakes118
-
Size
112KB
-
MD5
40a0d36a5c36840df700391a77802440
-
SHA1
f370cb37f3ef8713e1db54a057206162d201c685
-
SHA256
e711541c08fc4d7911df8bc4dde36e9e1625e7153dd174307564efdfa443f2ca
-
SHA512
4273ff918f5a8a19b5b47255676ce15f2c48ee2fee4e96644d3863cc80b2dcda5f8b66ebec37d02f0954d974da0c9f81babc5494efd31d14a1a41dea78c55ce2
-
SSDEEP
1536:IWzyxNV4Uwap/Z7s8ERzgq1sjGwGDwvgK7/Y8BEomOgG:IlxNV4UwCx7s8ERCjGJOxBEovgG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40a0d36a5c36840df700391a77802440_JaffaCakes118
Files
-
40a0d36a5c36840df700391a77802440_JaffaCakes118.exe windows:4 windows x86 arch:x86
e32e0a0570047bfe7a563fc03b5651db
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryA
GetModuleFileNameA
GetLastError
Sleep
ReadFile
CreateFileA
DeviceIoControl
GetModuleHandleA
GetSystemDirectoryA
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
LocalFree
SetEndOfFile
SetStdHandle
IsBadCodePtr
GetShortPathNameA
GetVolumeInformationA
OpenMutexA
CreateToolhelp32Snapshot
Process32First
Process32Next
OpenProcess
GetFileAttributesA
DeleteFileA
CreateProcessA
WaitForSingleObject
CloseHandle
SetFileAttributesA
CopyFileA
GetLogicalDriveStringsA
GetVersionExA
LoadLibraryA
GetProcAddress
FreeLibrary
GetWindowsDirectoryA
IsBadReadPtr
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetFilePointer
IsBadWritePtr
VirtualAlloc
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
LCMapStringA
LCMapStringW
GetCPInfo
HeapSize
GetACP
GetOEMCP
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
advapi32
DeleteService
SetServiceStatus
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
ControlService
StartServiceA
QueryServiceStatus
CreateServiceA
ChangeServiceConfig2A
RegCreateKeyA
RegSetValueExA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
DeregisterEventSource
GetUserNameA
CreateProcessAsUserA
OpenProcessToken
RegOpenKeyExA
RegCloseKey
ole32
CoUninitialize
CoGetClassObject
StringFromCLSID
CoInitialize
oleaut32
VariantClear
Sections
.text Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ