d:\xrts\fedve\eoveeso\xeo
Static task
static1
Behavioral task
behavioral1
Sample
40e9dfcd89e33c4f5e452abb04ba00d1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
40e9dfcd89e33c4f5e452abb04ba00d1_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
40e9dfcd89e33c4f5e452abb04ba00d1_JaffaCakes118
-
Size
544KB
-
MD5
40e9dfcd89e33c4f5e452abb04ba00d1
-
SHA1
8d8226bac8392c8efe256073bbf889bf4821bcd8
-
SHA256
af92b205113e831551a8fddae9fa02c2c8af642035a08a93b85d4f0854a35d63
-
SHA512
683386b37b61850c26bce93cf808519b981a8d7c5632a006239aabeef946fd5eaa6732c4a0646e7787d53c76f0699d0a5ff3ed3dd65f0106b9893bad90a42e05
-
SSDEEP
12288:hWelK6ryRuKwoGthdb/OlaZM7uzZbG9Ex1d0N2gDrqOb:hTr2DwBthdbOAMKzZbG9Ex1d0N2gDrqu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40e9dfcd89e33c4f5e452abb04ba00d1_JaffaCakes118
Files
-
40e9dfcd89e33c4f5e452abb04ba00d1_JaffaCakes118.exe windows:4 windows x86 arch:x86
8e1ab36f1551ea921f2ec03fcbf0d75a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
advapi32
LookupPrivilegeValueA
CryptSetProviderW
RegSetValueW
RegConnectRegistryA
CryptImportKey
RegRestoreKeyW
RegDeleteValueW
CryptGetUserKey
shell32
DragFinish
FindExecutableA
comctl32
DrawStatusTextW
_TrackMouseEvent
ImageList_GetImageCount
ImageList_Duplicate
ImageList_Destroy
ImageList_DragMove
ImageList_SetOverlayImage
ImageList_LoadImageA
ImageList_SetIconSize
CreateMappedBitmap
ImageList_DrawEx
CreateStatusWindowA
InitCommonControlsEx
ImageList_DrawIndirect
ImageList_DragEnter
ImageList_GetIconSize
user32
GetMenuCheckMarkDimensions
SetDebugErrorLevel
GetForegroundWindow
OemKeyScan
GetThreadDesktop
GetWindowDC
GetClassInfoW
PtInRect
GetMonitorInfoW
SetUserObjectInformationW
RegisterClassExA
EditWndProc
MapWindowPoints
DialogBoxIndirectParamW
GetIconInfo
GetWindowPlacement
DestroyWindow
RegisterClassA
PackDDElParam
ChangeDisplaySettingsExW
RegisterDeviceNotificationA
GetWindowContextHelpId
GetMonitorInfoA
EnumDesktopsA
WINNLSGetIMEHotkey
DefWindowProcW
ShowWindow
CreateWindowExA
SendMessageTimeoutA
GetScrollPos
SendDlgItemMessageW
MessageBoxW
ChangeMenuA
gdi32
DeleteDC
DeleteObject
GetDeviceCaps
SetPixelFormat
DeleteEnhMetaFile
GetMetaRgn
GetFontData
SetMapperFlags
GetObjectA
CreateRoundRectRgn
GetMetaFileA
GetSystemPaletteEntries
CreateDCW
kernel32
QueryPerformanceCounter
GetDateFormatA
EnumSystemLocalesA
GetCommandLineA
IsValidLocale
VirtualQuery
SetUnhandledExceptionFilter
GetWindowsDirectoryA
HeapFree
GetCommandLineW
GetCurrentThread
GetEnvironmentStringsW
GetStartupInfoA
GetProcAddress
TlsAlloc
SetHandleCount
WideCharToMultiByte
GetStdHandle
GetModuleHandleW
GetOEMCP
OpenMutexA
GetCurrentProcessId
GetUserDefaultLCID
ExitProcess
WriteConsoleA
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
HeapReAlloc
MapViewOfFile
IsDebuggerPresent
UnhandledExceptionFilter
VirtualAlloc
MultiByteToWideChar
TlsSetValue
SetStdHandle
LoadLibraryA
GetConsoleMode
TlsFree
GetLocaleInfoA
DeleteCriticalSection
HeapCreate
GetTimeFormatA
GetCurrentThreadId
GetModuleHandleA
GlobalFindAtomA
InterlockedExchange
GetTickCount
GetModuleFileNameA
GetConsoleOutputCP
InterlockedIncrement
GetCurrentProcess
WriteConsoleW
FlushFileBuffers
GetCPInfo
GetStringTypeA
GetDiskFreeSpaceW
SetEnvironmentVariableA
GetConsoleCP
TlsGetValue
RtlUnwind
SetComputerNameA
CompareFileTime
CreateDirectoryExA
HeapSize
CreateFileA
GetACP
CreateFileMappingA
SetFilePointer
CompareStringW
GetStringTypeW
GetFileType
VirtualProtect
EnterCriticalSection
GetStartupInfoW
GetLastError
IsValidCodePage
VirtualFree
LCMapStringA
SetConsoleCtrlHandler
GetModuleFileNameW
CloseHandle
GetTimeZoneInformation
FreeEnvironmentStringsW
WriteFile
LCMapStringW
CreateMutexA
Sleep
HeapAlloc
HeapDestroy
SetLastError
ReadFile
TerminateProcess
CompareStringA
GetLocaleInfoW
InterlockedDecrement
LeaveCriticalSection
FreeLibrary
Sections
.text Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 253KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ