Static task
static1
Behavioral task
behavioral1
Sample
40e8c2b87b39260369d99ab616037363_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
40e8c2b87b39260369d99ab616037363_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40e8c2b87b39260369d99ab616037363_JaffaCakes118
-
Size
180KB
-
MD5
40e8c2b87b39260369d99ab616037363
-
SHA1
a36a6fb08188ec4be91965c9fad5061c13c854a5
-
SHA256
465653865392b3ac74b5330a49a79c40487dd9812a718d6b643bf0bb524eedea
-
SHA512
1ad91817794c1e7e958d3794e09eff9d138811e85bdc8398e12b0d8d153c833142d00c99e30f89fe0984414bd4a27672aa4b5123929746c11bc84799c51a4494
-
SSDEEP
3072:5bxPE98ahbGNIXfqCeV1Ebk/GLN4KnEXbTASJ9RyP0vm+IpUqH:5k8xNIXfNefheLzoPKsRm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40e8c2b87b39260369d99ab616037363_JaffaCakes118
Files
-
40e8c2b87b39260369d99ab616037363_JaffaCakes118.exe windows:4 windows x86 arch:x86
5b58bfcd3b37b1bef2739105b94b1571
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathUndecorateW
SHRegQueryInfoUSKeyW
ord515
StrRChrA
PathIsContentTypeA
shell32
SHFreeNameMappings
ExtractAssociatedIconW
SHFileOperationW
DragQueryFileW
CommandLineToArgvW
gdi32
SetMiterLimit
ScaleViewportExtEx
CreateHalftonePalette
AddFontResourceExW
comctl32
ord5
ord17
ord4
kernel32
GetFileTime
DosDateTimeToFileTime
SetHandleCount
SetFilePointer
LocalAlloc
FindCloseChangeNotification
GetModuleHandleA
GetProcAddress
LoadLibraryA
CopyFileExW
ConvertFiberToThread
IsValidLocale
IsValidCodePage
CreateFileW
GetGeoInfoW
GetNativeSystemInfo
InterlockedExchange
FlushFileBuffers
lstrcmpiW
FindNextVolumeW
GetLargestConsoleWindowSize
VirtualFreeEx
GetStartupInfoA
user32
RegisterRawInputDevices
LockSetForegroundWindow
WaitMessage
EndPaint
CopyIcon
InsertMenuItemW
CreateIcon
LoadMenuIndirectW
CallWindowProcW
CharPrevExA
SetWindowWord
GetWindowTextA
SetScrollRange
DlgDirListComboBoxW
GetMessageW
msvcrt
wcsncmp
strcoll
mktime
fscanf
ungetwc
vwprintf
swprintf
system
ferror
wcsspn
vprintf
iswupper
strncpy
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
malloc
memset
_sleep
memmove
memcpy
strrchr
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 129KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE