Static task
static1
Behavioral task
behavioral1
Sample
40ddc6680a9b41ae73bca1dbc98b87b9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
40ddc6680a9b41ae73bca1dbc98b87b9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40ddc6680a9b41ae73bca1dbc98b87b9_JaffaCakes118
-
Size
376KB
-
MD5
40ddc6680a9b41ae73bca1dbc98b87b9
-
SHA1
ced9c17de55a15ffbadad95d6ce9fc97671c525b
-
SHA256
18daa2051265eee9f4ee4548e5379afd32bd55f23344f269e26231379efb91fa
-
SHA512
2498c0a16604b0782baa291971a8a3a329e8c715362a256c4a55f4d94bd5f5a30b0ba4bcc5ab88a7038d039ce808fb0856a8951054b9ff9f88d0c6b6fb177330
-
SSDEEP
6144:J7t0rHG1Jf7Zhl1MkS7CaoMsqnRO/qW4AyBxBwVkZuApnlRQe:J7gm9fNrBCW4xBxBLZnk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40ddc6680a9b41ae73bca1dbc98b87b9_JaffaCakes118
Files
-
40ddc6680a9b41ae73bca1dbc98b87b9_JaffaCakes118.exe windows:5 windows x86 arch:x86
12672ae394a793e1c1ccd8a16a438856
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
_CxxThrowException
__CxxFrameHandler
__argc
_wtoi
_itow
_XcptFilter
_initterm
_wtol
_wcsicmp
__wgetmainargs
__p__commode
__set_app_type
wcscmp
_wcsdup
__p__fmode
_cexit
_wsplitpath
wcscat
_onexit
_adjust_fdiv
_c_exit
_purecall
__wargv
_controlfp
_getdcwd
_ltow
_beginthreadex
rand
_exit
__setusermatherr
exit
wcstok
__dllonexit
free
_wcmdln
wcschr
_except_handler3
user32
RegisterClassExA
DispatchMessageA
ShowWindow
DefWindowProcA
TranslateMessage
SendMessageA
GetMessageA
UpdateWindow
DestroyWindow
CreateWindowExA
kernel32
GetCurrentThreadId
GetProcAddress
FreeLibrary
MultiByteToWideChar
FileTimeToLocalFileTime
SetUnhandledExceptionFilter
lstrcmpW
GlobalAlloc
GetThreadLocale
GetFileTime
VirtualFree
RaiseException
VirtualAlloc
GetLastError
CloseHandle
GlobalReAlloc
LoadLibraryW
TerminateProcess
GetFileAttributesW
lstrcpyW
CreateDirectoryW
GetTempFileNameW
QueryPerformanceCounter
GlobalLock
GetCurrentProcessId
MulDiv
GetCurrentProcess
GetLocaleInfoW
SetEndOfFile
GetSystemTimeAsFileTime
FileTimeToSystemTime
GetModuleHandleA
GlobalFree
lstrlenW
LocalAlloc
GetDateFormatW
GetACP
CreateFileW
lstrlenA
GetModuleHandleW
IsDBCSLeadByte
HeapSize
SetErrorMode
GetProcessHeap
GetTickCount
InterlockedDecrement
InterlockedExchange
GetTimeFormatW
FindFirstFileW
lstrcmpiW
InterlockedIncrement
GlobalUnlock
FindClose
GetTempPathW
GetFileSize
GetStartupInfoW
GetExitCodeThread
LocalFree
GetProcessHeaps
HeapAlloc
lstrcatW
LoadLibraryA
UnhandledExceptionFilter
lstrcpynW
GetNumberFormatW
gdi32
TextOutW
BitBlt
LPtoDP
ExtTextOutW
GetObjectW
SetROP2
SetStretchBltMode
GetNearestColor
CreatePalette
SetDIBits
RoundRect
GetStockObject
PolyBezier
GetNearestPaletteIndex
Polyline
ExtFloodFill
GetTextColor
GetCurrentObject
CreatePatternBrush
GetDIBColorTable
PatBlt
SetBkColor
RestoreDC
SetTextColor
SetDIBitsToDevice
LineTo
SetPixel
Ellipse
GetDIBits
SetViewportExtEx
CreateDIBSection
PtVisible
SetPaletteEntries
CreateCompatibleDC
Escape
CreateRectRgnIndirect
GetTextMetricsW
Polygon
StretchDIBits
TranslateCharsetInfo
SetMapMode
EnumFontFamiliesW
GetBkMode
CreatePen
CreateBitmap
CreateDIBitmap
DeleteObject
GetTextExtentPoint32W
SelectPalette
CreatePolygonRgn
CreateDCW
GetPaletteEntries
PlayMetaFile
SetBrushOrgEx
GetDeviceCaps
OffsetRgn
EnumFontFamiliesExW
GetPixel
DeleteDC
SetDIBColorTable
MoveToEx
SaveDC
RectVisible
SelectObject
SetBkMode
StretchBlt
FillRgn
SetTextAlign
CreateSolidBrush
CreateFontIndirectW
CreateCompatibleBitmap
ResizePalette
RealizePalette
Rectangle
UnrealizeObject
CreateHalftonePalette
CreateICW
Sections
.text Size: 198KB - Virtual size: 198KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 171KB - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ