Static task
static1
Behavioral task
behavioral1
Sample
40a32d1ef69e706f3c8ba26ff1d1c7b9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
40a32d1ef69e706f3c8ba26ff1d1c7b9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40a32d1ef69e706f3c8ba26ff1d1c7b9_JaffaCakes118
-
Size
242KB
-
MD5
40a32d1ef69e706f3c8ba26ff1d1c7b9
-
SHA1
8d80a6f968cbce5de3073a6038325c6ef422375b
-
SHA256
02231fc5433b0896e7fe28d3be67c8d67185385762b2cf55d9c7e9833122a0de
-
SHA512
f93f4246b5b3a5556098dfbb4ea021c07bb76e17332fa2137ba4e9ecc4b94e6b3c56fba7143b7960409a5dc07602ba3804bcecfda3ec475cce0bfb05f0b4550a
-
SSDEEP
6144:md78T9J6NL70Jf4J7Ku/lHzwGL81cmeB/KJcChjI/OWpPzZ77Ku6cYu:tT9J6NL7qmHlLgc/zPzZnKJu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40a32d1ef69e706f3c8ba26ff1d1c7b9_JaffaCakes118
Files
-
40a32d1ef69e706f3c8ba26ff1d1c7b9_JaffaCakes118.exe windows:5 windows x86 arch:x86
71e027b3d23730e6b25ecee8c68b3b38
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoA
ws2_32
accept
send
ntohs
kernel32
lstrcpyA
lstrcatA
Sleep
lstrcmpA
lstrcmpiA
GetModuleHandleA
IsDebuggerPresent
GetCurrentProcess
VerLanguageNameA
ReadConsoleA
CloseHandle
WriteProcessMemory
lstrlenW
GetModuleFileNameW
ReadProcessMemory
GetCommandLineA
GetProcAddress
CreateMutexA
GetModuleFileNameA
LoadLibraryA
lstrlenA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
SetEnvironmentVariableA
ExitProcess
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetLastError
RaiseException
CompareStringW
MultiByteToWideChar
CompareStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetStartupInfoA
HeapFree
HeapAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WideCharToMultiByte
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
VirtualAlloc
HeapReAlloc
HeapSize
user32
MessageBoxA
CreateWindowExA
GetSysColor
DialogBoxParamA
GetWindowRect
GetMessageA
GetSubMenu
DestroyIcon
EnableMenuItem
MessageBoxW
gdi32
DeleteDC
SetBkMode
BitBlt
CreateDCA
CreateDIBitmap
GetFontData
RealizePalette
shell32
Shell_NotifyIconA
ShellExecuteA
SHGetFileInfoA
ole32
CoCreateInstance
CoInitialize
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ