Static task
static1
Behavioral task
behavioral1
Sample
40d34a6fb10dd2b41172dcf31b40e1de_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
40d34a6fb10dd2b41172dcf31b40e1de_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40d34a6fb10dd2b41172dcf31b40e1de_JaffaCakes118
-
Size
169KB
-
MD5
40d34a6fb10dd2b41172dcf31b40e1de
-
SHA1
dcc2abd60a27f7316f59179fe47378a7971cd4f7
-
SHA256
173ae67cea601372a063c2602d1426c205e5c5f38f5c634225fbfb957cec844c
-
SHA512
1b200134f7d0e4e9ec5a71b7b7bca165e8ea650a93d0e82df55e8c2fa8bcb935011fb128b4353d525519e0b6e8494a251e0b949b97802abec63c8ed0485eec9f
-
SSDEEP
3072:bVHbBgpYpqPlCBOEbEj+hwWjVKyi3+QS5oMn+mDj2j6e:bVSRlcOkE6iyiymMRI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40d34a6fb10dd2b41172dcf31b40e1de_JaffaCakes118
Files
-
40d34a6fb10dd2b41172dcf31b40e1de_JaffaCakes118.exe windows:5 windows x86 arch:x86
cee4dbd8c0f336fe863cb48861ed9b5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDesktopWindow
TranslateMessage
CharNextA
GetDC
GetSystemMetrics
GetParent
gdi32
CreatePen
SetTextColor
LineTo
RectVisible
DeleteDC
GetPixel
RestoreDC
SetTextAlign
SelectObject
GetClipBox
CreateCompatibleDC
SaveDC
CreatePalette
GetDeviceCaps
GetStockObject
SetStretchBltMode
GetTextMetricsA
PatBlt
DeleteObject
CreateSolidBrush
GetObjectA
SetMapMode
SelectPalette
CreateFontIndirectA
kernel32
RemoveDirectoryA
GetProcessHeap
GetModuleHandleA
GetACP
GetCommandLineW
lstrcmpiW
GetCurrentThread
lstrlenA
GetCurrentProcess
GlobalFindAtomW
GetConsoleOutputCP
GetOEMCP
GetWindowsDirectoryA
GetThreadLocale
QueryPerformanceCounter
SetCurrentDirectoryA
GetModuleHandleW
DeleteFileW
GetCurrentThreadId
GetTickCount
GlobalFindAtomA
IsDebuggerPresent
lstrlenW
MulDiv
GetCommandLineA
lstrcmpA
GetDriveTypeA
GetCurrentProcessId
lstrcmpiA
CopyFileA
GetUserDefaultLangID
GetVersion
DeleteFileA
GetStartupInfoA
VirtualAlloc
VirtualFree
glu32
gluNurbsCallback
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Syywxj J Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Cav, Rol Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ