Static task
static1
Behavioral task
behavioral1
Sample
40e814a8f7e4503f212beacc531f2e89_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
40e814a8f7e4503f212beacc531f2e89_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40e814a8f7e4503f212beacc531f2e89_JaffaCakes118
-
Size
406KB
-
MD5
40e814a8f7e4503f212beacc531f2e89
-
SHA1
4e34379f2a91961e3528993198d813a689b47f08
-
SHA256
6830d9a15fcaed0f82d267c1c61708b53ae9f2adf8bdd2556414965a84e1f665
-
SHA512
8aceb7d915c596f34c90fde5acce1c92859f56411b149da1539253b74621ab75c725f77d56001cec50a1171a7bd51d5bfaac322b7c80b746c7cc4d20ff175200
-
SSDEEP
12288:5yQG7RnSLD6U2Ybbe6UgyzMoCfirdO4H:8P7RSLOU2Ybb4zgofX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40e814a8f7e4503f212beacc531f2e89_JaffaCakes118
Files
-
40e814a8f7e4503f212beacc531f2e89_JaffaCakes118.exe windows:4 windows x86 arch:x86
e38b8a328447f307958629592a099709
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushInstructionCache
TerminateProcess
GetProcessShutdownParameters
WaitNamedPipeW
GetProcAddress
VirtualAlloc
HeapReAlloc
SetConsoleTitleW
GetEnvironmentVariableW
GetSystemTimeAsFileTime
GetCurrentProcessId
HeapAlloc
HeapCreate
GetCurrentThreadId
GetCurrentProcess
GetModuleHandleA
FindResourceA
GlobalGetAtomNameW
WriteConsoleW
InterlockedExchange
RtlUnwind
lstrlen
QueryPerformanceCounter
VirtualQuery
LocalShrink
GetConsoleMode
MapViewOfFileEx
MoveFileA
LocalReAlloc
ExitProcess
GetTickCount
SetConsoleCtrlHandler
FindAtomA
HeapFree
LoadLibraryA
GetModuleFileNameA
EnumSystemLocalesW
comdlg32
ReplaceTextW
GetSaveFileNameA
GetFileTitleA
GetFileTitleW
LoadAlterBitmap
ReplaceTextA
ChooseFontW
PrintDlgA
FindTextA
PrintDlgW
PageSetupDlgW
GetOpenFileNameA
ChooseColorA
Sections
.text Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 266KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ