Static task
static1
Behavioral task
behavioral1
Sample
40abfe31038260db2b12ad3783fad7db_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
40abfe31038260db2b12ad3783fad7db_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40abfe31038260db2b12ad3783fad7db_JaffaCakes118
-
Size
73KB
-
MD5
40abfe31038260db2b12ad3783fad7db
-
SHA1
63038d6d4f79c6c07be119b542dc051b74e38d1f
-
SHA256
ad6e51d9b7426900399ba8c62411b37a00e46e482a625e2c5d23c9fa622a8fea
-
SHA512
f1ffc45e1ddf0725e55a9daac870acefddcfea229df2b7fe3e7247f74c6da1cf02e100d39dabbd8945ba3de9c15e881708dc2607f4aa3d339f558d20c15e56bd
-
SSDEEP
768:mw9EnvqiMbCkYvx76zuCpRhng9D24CABA25F+G6xu5AVTiHniBM:X9EnvqiMbCk0x6a6gxUwyuciC2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40abfe31038260db2b12ad3783fad7db_JaffaCakes118
Files
-
40abfe31038260db2b12ad3783fad7db_JaffaCakes118.exe windows:4 windows x86 arch:x86
7225b176e1734928ea81d53a9861d20e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
SuspendThread
Sleep
ResumeThread
CreateProcessA
CloseHandle
OpenProcess
ReadProcessMemory
WriteProcessMemory
VirtualProtectEx
VirtualQueryEx
GetStringTypeA
SetEndOfFile
LoadLibraryA
GetProcAddress
CreateFileA
FlushFileBuffers
SetStdHandle
VirtualAlloc
WriteFile
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
GetLastError
ReadFile
ExitProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
HeapAlloc
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
GetStringTypeW
user32
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
FindWindowA
GetWindowThreadProcessId
EndDialog
DialogBoxParamA
MessageBoxA
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ