Static task
static1
Behavioral task
behavioral1
Sample
40e19fc3b5e1c73a519fc281547ef618_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
40e19fc3b5e1c73a519fc281547ef618_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
40e19fc3b5e1c73a519fc281547ef618_JaffaCakes118
-
Size
508KB
-
MD5
40e19fc3b5e1c73a519fc281547ef618
-
SHA1
d424d2efc2823fc5a63994945cfb88078431159b
-
SHA256
58499e61e593e0575641bea1c50d792d95bbc43927c6e29e7f06a4cdb200724a
-
SHA512
41c4d650a81a37c9b19f2ee79f9f9537434f33d8a5fc6f69c80724028a7a4105a3ae62e35ceebea3804f01a8bdcaaafa10f7db3ece220ebf9dadb841da054c8a
-
SSDEEP
12288:yXvylQVM49HkTCgRZYmSUp4Cf3RVSeIpl:ylVMvCgHYmSUuCfC77
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40e19fc3b5e1c73a519fc281547ef618_JaffaCakes118
Files
-
40e19fc3b5e1c73a519fc281547ef618_JaffaCakes118.exe windows:4 windows x86 arch:x86
2cc8b9c3f753d51bd0a10c0ddce1fcfa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CoTaskMemFree
comctl32
ImageList_SetIconSize
winspool.drv
OpenPrinterA
shell32
ShellExecuteA
wininet
HttpSendRequestExA
comdlg32
ChooseFontA
wsock32
WSACleanup
winmm
sndPlaySoundA
Sections
CODE Size: 475KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE