Static task
static1
Behavioral task
behavioral1
Sample
40de3fa2ee6cb4c6ed5e0856f99cf9fe_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
40de3fa2ee6cb4c6ed5e0856f99cf9fe_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40de3fa2ee6cb4c6ed5e0856f99cf9fe_JaffaCakes118
-
Size
69KB
-
MD5
40de3fa2ee6cb4c6ed5e0856f99cf9fe
-
SHA1
27594b12ca6bdf3064f53aae00530ffb498c1533
-
SHA256
95ed67ee51b384baf7927ec78357fbeb6e67c1539e7bc9cf633f7ad0c34b8cbe
-
SHA512
30ee0f250217eaedc0c666eb816e59f1db839832fe1073c3c9853dbdf2e2a4ece25ed66a4e38d8fa892f5492f34151c89eba152eeb4e45249738d39c33df1386
-
SSDEEP
1536:XI6R+A25yXlzEMi2LZw/pAQjDNcj2elnNP7X8Sm/ZF8otV1B84:XIkVloKZvQjBcj2ap7X8S8vb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40de3fa2ee6cb4c6ed5e0856f99cf9fe_JaffaCakes118
Files
-
40de3fa2ee6cb4c6ed5e0856f99cf9fe_JaffaCakes118.exe windows:4 windows x86 arch:x86
e6616ad4a12b746bffb2272acaa37684
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
CloseHandle
BuildCommDCBA
SetConsoleWindowInfo
GetCommState
GetCommTimeouts
WriteFile
SetConsoleCursorMode
GlobalGetAtomNameA
LockFileEx
GetConsoleOutputCP
EnumSystemLanguageGroupsA
QueueUserWorkItem
CancelIo
FlushConsoleInputBuffer
BackupRead
SetConsoleCtrlHandler
GetConsoleInputWaitHandle
GetStringTypeExA
GetCommandLineA
GetStartupInfoA
ExitProcess
FoldStringA
GetCurrentProcess
SetInformationJobObject
IsDebuggerPresent
GetCommMask
WritePrivateProfileSectionA
CancelWaitableTimer
SetCurrentDirectoryA
Toolhelp32ReadProcessMemory
DosDateTimeToFileTime
GlobalAddAtomA
SetConsoleLocalEUDC
GetCommProperties
GetEnvironmentStringsA
GetPrivateProfileStructA
SetEvent
VerifyConsoleIoHandle
ReadProcessMemory
Sections
WEIJUNLI Size: 4KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.date Size: 46KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ