Static task
static1
Behavioral task
behavioral1
Sample
40bc95b3ea3e412b39dda3cf4c7b82aa_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
40bc95b3ea3e412b39dda3cf4c7b82aa_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40bc95b3ea3e412b39dda3cf4c7b82aa_JaffaCakes118
-
Size
146KB
-
MD5
40bc95b3ea3e412b39dda3cf4c7b82aa
-
SHA1
9fec7b25eae64137b13575800ce4bc0e5c0b403e
-
SHA256
acfcd985199a47cf989890b9b16eb304f6bfc504fcd1167268f59556bf0d1156
-
SHA512
508a2bfc37e4a1c2ecf3046b2aa46e9893e72dc5804034221523a5794e78df3f19d1decf0d20f54e7ff84118fa48e34a4feb0da06c5d7aebd41f7b3a66ca7511
-
SSDEEP
3072:HzbGE2gx+1+vUVi5hg1lV9w4uTwiWFezB2FJTCdYjq:HzigdUVi5C1lV9w43aBhY+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40bc95b3ea3e412b39dda3cf4c7b82aa_JaffaCakes118
Files
-
40bc95b3ea3e412b39dda3cf4c7b82aa_JaffaCakes118.exe windows:5 windows x86 arch:x86
fef4a676769ff76fc2afb1d2390971b3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
dbghelp
MakeSureDirectoryPathExists
kernel32
InterlockedExchangeAdd
CreateProcessA
WriteFile
CreateFileA
CloseHandle
ExitProcess
lstrlenA
SetErrorMode
GlobalLock
GetWindowsDirectoryA
GlobalAlloc
Sleep
MulDiv
FileTimeToSystemTime
GlobalUnlock
FindFirstFileA
GlobalFree
FindClose
GetModuleFileNameA
GetModuleHandleA
lstrcpyA
lstrcpynA
lstrcatA
HeapReAlloc
HeapAlloc
InterlockedIncrement
InterlockedDecrement
HeapFree
GetTickCount
GetProcessHeap
OutputDebugStringA
user32
wsprintfA
GetWindowDC
FillRect
GetClientRect
DialogBoxParamA
LoadImageA
SetWindowTextA
GetSystemMetrics
EndDialog
GetDlgItem
ReleaseDC
GetAsyncKeyState
GetDC
SendMessageA
MessageBoxA
gdi32
CreateCompatibleDC
BitBlt
CreateCompatibleBitmap
DeleteDC
GetDeviceCaps
DeleteObject
SelectObject
ole32
CreateStreamOnHGlobal
oleaut32
OleLoadPicture
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 45B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ