Static task
static1
Behavioral task
behavioral1
Sample
40adeaff7144d6d8527fb29bb6b67b2d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
40adeaff7144d6d8527fb29bb6b67b2d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40adeaff7144d6d8527fb29bb6b67b2d_JaffaCakes118
-
Size
296KB
-
MD5
40adeaff7144d6d8527fb29bb6b67b2d
-
SHA1
c45f06e647caacd5f1d6894138dbe6aa3b6aef8d
-
SHA256
d5f447f11d33277f346924766f39166dece8ed18abc76187719759af54782ee1
-
SHA512
aff13f9783ac5d919e405f4c20de4000b0af7794ec6a49079d68cdc9a6b0e57551453c569fe101b5adf8117d514dac51e19af98bd8daecd7cd5c45a1850b068d
-
SSDEEP
6144:mfmRkE7VNf070mHPyXGRZbU7OGCEKatb5E/:mfmRkE7VNf0PFRa7O2d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40adeaff7144d6d8527fb29bb6b67b2d_JaffaCakes118
Files
-
40adeaff7144d6d8527fb29bb6b67b2d_JaffaCakes118.exe windows:4 windows x86 arch:x86
2b8fb7e2da5ece0b965433706b9edfd1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptEnumProviderTypesA
CryptSetProvParam
CryptSignHashA
user32
BroadcastSystemMessageW
GetUpdateRect
SendIMEMessageExW
SetCaretBlinkTime
ShowWindow
MessageBoxA
GetMenuState
EnableWindow
RegisterWindowMessageW
RegisterClassExA
CreateWindowExW
IsClipboardFormatAvailable
GetClipboardData
SendInput
GetClassWord
GetWindowContextHelpId
RegisterClassA
GetClassInfoW
InSendMessage
DefWindowProcW
IsWindowEnabled
DestroyWindow
CreateDesktopA
DdeGetLastError
ModifyMenuW
IsDialogMessage
GetProcessWindowStation
GetKeyboardState
kernel32
GetVersionExA
GetLocaleInfoA
TlsFree
HeapDestroy
ReadConsoleW
DeleteCriticalSection
GetNamedPipeInfo
RtlZeroMemory
InterlockedIncrement
HeapAlloc
GetLongPathNameW
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
GetCurrentProcess
EnumSystemLocalesA
WriteConsoleOutputW
LeaveCriticalSection
WaitForMultipleObjectsEx
ReadConsoleOutputW
EnumResourceNamesW
TlsAlloc
ReadConsoleInputA
SetStdHandle
LocalReAlloc
SetConsoleWindowInfo
GetFileTime
TlsGetValue
SetConsoleTitleW
SetFilePointer
GetSystemInfo
GetLocaleInfoW
TerminateProcess
GetStartupInfoA
DuplicateHandle
LoadLibraryA
WideCharToMultiByte
GetModuleHandleA
CreateMailslotW
GetCommandLineA
EnterCriticalSection
GetProcessHeaps
GlobalCompact
CloseHandle
FreeEnvironmentStringsA
HeapFree
UnhandledExceptionFilter
UnmapViewOfFile
GetUserDefaultLCID
FreeEnvironmentStringsW
GetTickCount
CreateSemaphoreW
HeapReAlloc
WriteConsoleOutputAttribute
EnumDateFormatsW
FindClose
SetLastError
WritePrivateProfileSectionA
InterlockedExchange
LoadLibraryW
GetStdHandle
OpenMutexA
SetVolumeLabelA
SetHandleCount
GetModuleFileNameW
VirtualFree
GetPrivateProfileStructW
QueryPerformanceCounter
SetEnvironmentVariableA
GetStringTypeA
LCMapStringA
WaitForSingleObjectEx
lstrcpyn
CreateWaitableTimerW
GetDiskFreeSpaceExW
FindFirstFileExA
GetEnvironmentStrings
WriteFile
HeapCreate
LockResource
GetEnvironmentStringsW
CompareStringW
GetCurrentThreadId
GetPrivateProfileSectionW
VirtualProtect
CreateMutexA
GetACP
GetCurrentThread
HeapSize
GetOEMCP
InitializeCriticalSection
MultiByteToWideChar
IsBadWritePtr
GetFullPathNameW
TlsSetValue
IsValidLocale
GetFileType
GetStringTypeW
GetTimeFormatA
LockFile
WaitCommEvent
CompareStringA
GetTimeZoneInformation
RtlUnwind
MoveFileW
GetDateFormatA
OpenEventA
GetModuleHandleW
GlobalAddAtomA
GetThreadPriority
GetLastError
GetLogicalDriveStringsA
ReadFile
IsValidCodePage
SetThreadContext
OpenSemaphoreA
lstrcat
VirtualAlloc
FillConsoleOutputCharacterW
GetProcAddress
SetLocalTime
GetFileAttributesExA
ExitProcess
GetModuleFileNameA
CreateDirectoryA
GetCalendarInfoA
lstrcmpA
FlushFileBuffers
VirtualQuery
GetCPInfo
comctl32
ImageList_GetFlags
ImageList_AddMasked
InitCommonControlsEx
ImageList_SetImageCount
ImageList_Read
ImageList_Duplicate
wininet
FtpFindFirstFileW
ShowClientAuthCerts
SetUrlCacheEntryGroupA
FindFirstUrlCacheContainerA
RunOnceUrlCache
SetUrlCacheEntryInfoW
shell32
ExtractAssociatedIconW
SHEmptyRecycleBinA
SHFileOperation
gdi32
SelectClipRgn
SetStretchBltMode
GetEnhMetaFileW
Sections
.text Size: 80KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ