c:\dste\isxwmflmgy\artnuvch\etee\fpridpw\zjab
Static task
static1
Behavioral task
behavioral1
Sample
40d0361fa44c518eb3f518f688a11130_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
40d0361fa44c518eb3f518f688a11130_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40d0361fa44c518eb3f518f688a11130_JaffaCakes118
-
Size
544KB
-
MD5
40d0361fa44c518eb3f518f688a11130
-
SHA1
1fee6d86d05b2936a05410a2a5475ce34dfb52fa
-
SHA256
e3e485561bfba5351a0e8d37c7dab6ea704c0193dfe5fe446191be0d4aa32625
-
SHA512
fd9e6253ced148590bdc6b8d9467117e4510f29a52757911f704943790cdd7497717cb1ca7203bfa7454e250ff0cf3193b043252f3b651a7f9afcacb01ea8b2b
-
SSDEEP
12288:0lFiefxeZhj1nkvQ8oDi8t8fSMtyjIq3:0zieoZfn+QRDi8af8L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40d0361fa44c518eb3f518f688a11130_JaffaCakes118
Files
-
40d0361fa44c518eb3f518f688a11130_JaffaCakes118.exe windows:4 windows x86 arch:x86
c8a9ddc4e7a1c6be960054b031642ac4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_DragShowNolock
CreatePropertySheetPageA
ImageList_AddIcon
ImageList_Create
ImageList_SetIconSize
ImageList_SetDragCursorImage
ImageList_GetImageRect
ImageList_Remove
CreateToolbar
ImageList_DrawEx
_TrackMouseEvent
ImageList_Replace
InitCommonControlsEx
ImageList_Copy
CreateUpDownControl
kernel32
GetStringTypeW
GetModuleFileNameW
CompareStringW
CreateMutexA
LeaveCriticalSection
FlushInstructionCache
ReadFile
GetProcessHeaps
GlobalReAlloc
IsValidCodePage
VirtualAlloc
IsValidLocale
GetThreadTimes
HeapCreate
DeleteCriticalSection
MultiByteToWideChar
GetProcAddress
LCMapStringA
InterlockedExchange
GetCurrentProcessId
GetShortPathNameA
TerminateProcess
GetSystemTimeAsFileTime
HeapSize
GetLocaleInfoA
DeleteAtom
InterlockedDecrement
TlsGetValue
TlsAlloc
TlsSetValue
CreateFileA
HeapReAlloc
HeapAlloc
GetConsoleCP
GetDateFormatA
Sleep
EnumSystemLocalesA
GetTempPathA
WritePrivateProfileSectionW
SetLastError
SetConsoleCtrlHandler
SetStdHandle
ReadFileEx
SetFilePointer
GetEnvironmentStrings
CompareStringA
GetStdHandle
GlobalFindAtomA
GetTimeFormatA
GetStartupInfoA
FlushFileBuffers
ExitProcess
SetEnvironmentVariableA
FreeEnvironmentStringsW
QueryPerformanceCounter
ReadConsoleOutputCharacterA
GetCommandLineA
GetEnvironmentVariableW
GetCurrentThread
GetConsoleOutputCP
GetStringTypeA
GetModuleHandleA
GetOEMCP
SetHandleCount
HeapDestroy
GetFileType
GetFullPathNameA
GetFileSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WriteConsoleA
GetProcessHeap
LoadLibraryA
FreeLibrary
GetModuleFileNameA
CompareFileTime
TlsFree
GetVersionExA
VirtualFree
GetConsoleMode
GetTimeZoneInformation
VirtualQuery
GetCurrentThreadId
ConvertDefaultLocale
WriteFile
RtlUnwind
InterlockedIncrement
EnterCriticalSection
WideCharToMultiByte
GetCommandLineW
GetTickCount
FreeEnvironmentStringsA
GetStartupInfoW
GetLocaleInfoW
GetCurrentProcess
WriteConsoleW
IsDebuggerPresent
GetACP
LCMapStringW
GetCPInfo
GetLastError
SuspendThread
HeapFree
OpenMutexA
GetUserDefaultLCID
FindAtomW
GetEnvironmentStringsW
OpenProcess
InitializeCriticalSection
CloseHandle
user32
EnumPropsExW
EnumDesktopsW
BlockInput
SetSystemCursor
ReleaseCapture
GetCursorPos
DestroyWindow
GetClipboardFormatNameA
IsClipboardFormatAvailable
RegisterClassA
SetCapture
ValidateRgn
GetCaretBlinkTime
AppendMenuW
CharNextA
WaitMessage
GetSystemMetrics
CreateWindowExW
DestroyMenu
DdeUninitialize
DefWindowProcA
MessageBoxW
InvalidateRect
GetUpdateRgn
DrawEdge
DdePostAdvise
DispatchMessageW
DrawMenuBar
RegisterClassExA
GetScrollRange
TrackPopupMenu
ShowWindow
SetActiveWindow
TranslateAcceleratorW
LoadImageW
WINNLSEnableIME
UpdateWindow
UnregisterClassA
Sections
.text Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 264KB - Virtual size: 261KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ