Static task
static1
Behavioral task
behavioral1
Sample
40e2df322b83e32d1ab22542727701e8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
40e2df322b83e32d1ab22542727701e8_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
40e2df322b83e32d1ab22542727701e8_JaffaCakes118
-
Size
184KB
-
MD5
40e2df322b83e32d1ab22542727701e8
-
SHA1
ad8606bcb3893a36e3f0d2124c7c446a0337f78d
-
SHA256
2f84ff65cf4563e78fc06aef7676081ff9b6dcb88ac83f7e78ca581b88db8c48
-
SHA512
6c5cc4f1f4dd79e2e882d7513f0e7d253ba2e127c66d058eb339b65120840841b57803dd1765442c4d2bece814705f5814f046f4649e7da048c66c972c408a99
-
SSDEEP
3072:qau11Ke3Mfgh2rbL6VXANA9vq4MZCVPc14wYpJLMqwOf89LQto9as7T:qt11KBfghAX6VXAqq4MZC21ldXOE5eo7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40e2df322b83e32d1ab22542727701e8_JaffaCakes118
Files
-
40e2df322b83e32d1ab22542727701e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
db2bd1734eaf4100f76a7e93bdb661bd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegOpenKeyExA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
RegSetValueExA
RegCreateKeyExA
CloseServiceHandle
CreateServiceA
StartServiceA
OpenServiceA
DeleteService
OpenSCManagerA
ole32
CoInitialize
CoCreateInstance
CoCreateGuid
rpcrt4
UuidToStringA
shlwapi
SHEnumKeyExA
SHGetValueA
SHEnumValueA
StrStrIA
SHSetValueA
shell32
SHGetSpecialFolderPathA
user32
wsprintfA
msvcrt
malloc
__mb_cur_max
tolower
isupper
printf
strlen
isgraph
isdigit
??2@YAPAXI@Z
atoi
strncpy
rand
strerror
wcscpy
mbstowcs
wctomb
srand
time
isalpha
free
fclose
fwrite
fopen
memcmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memset
isxdigit
memcpy
ispunct
islower
strcpy
strcat
isspace
isalnum
sprintf
imagehlp
ImageNtHeader
kernel32
GetLastError
GetModuleHandleA
GetFileAttributesExA
SetFileTime
lstrlenA
CreateFileA
GetSystemDirectoryA
SleepEx
GetLocalTime
GetVersionExA
ExitProcess
FindFirstFileA
GetFileAttributesA
GetPrivateProfileStringA
FindNextFileA
CloseHandle
WideCharToMultiByte
GetStartupInfoA
Sections
.text Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE