Static task
static1
Behavioral task
behavioral1
Sample
40cd0b80b832e66cb456d8f5b44660fb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
40cd0b80b832e66cb456d8f5b44660fb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40cd0b80b832e66cb456d8f5b44660fb_JaffaCakes118
-
Size
452KB
-
MD5
40cd0b80b832e66cb456d8f5b44660fb
-
SHA1
286aa34cb6120b309eecfb258cbca5794b98c65b
-
SHA256
7a7be121c83b13f3d5915ddb35818a4e31fcf27c75f8ef5ab00fc35d9246eaa3
-
SHA512
268eb95c19450a3a9ba840c99d6fae96b9feaca06fb0b6cfe38aeb98de803cadfd479f13daaaab98157436009319992a160872136fe902c49444cf5afa750385
-
SSDEEP
6144:3dztlWeO3JeXGeMlNP9Ag9pyCH85Ml/pQnTsnS0rgb6TqcK0E6Zb9rdu4L8I:NzBOwW99Ag9YCH8m5i/YK0EgZnp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40cd0b80b832e66cb456d8f5b44660fb_JaffaCakes118
Files
-
40cd0b80b832e66cb456d8f5b44660fb_JaffaCakes118.exe windows:4 windows x86 arch:x86
3ef9d8c4d3f530580f6ed7a9607bef3e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
MessageBoxA
MessageBoxA
GetDC
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetModuleFileNameA
GetModuleFileNameA
LoadLibraryA
advapi32
RegFlushKey
comctl32
ImageList_Add
gdi32
SaveDC
oleaut32
VariantCopy
version
VerQueryValueA
Sections
.text Size: 29KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE