Static task
static1
Behavioral task
behavioral1
Sample
40790fcc458de2a303f7071e2ab7565c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
40790fcc458de2a303f7071e2ab7565c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
40790fcc458de2a303f7071e2ab7565c_JaffaCakes118
-
Size
339KB
-
MD5
40790fcc458de2a303f7071e2ab7565c
-
SHA1
688cfa1939039c4ead83965c2b32fb42ecc7e77e
-
SHA256
6bfd4a615942a01c94568f07c2c20eed254a2ad0d85d072e7791c20381ed1bc9
-
SHA512
3a8257a358e88b758dae0436f880f9f725a438b957ca7c78b6530a9d151b65d3a5c11ae86ba97673949026862077d3c14b0bd7608cdb3edfc9e030eb125b4305
-
SSDEEP
6144:tEDgxcx8J5uybal9CEaeg5llzrHhtdJqtpWpLMdkCoMKBi:tFqxKMybyg5fzrH0pW6dkCoMKw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40790fcc458de2a303f7071e2ab7565c_JaffaCakes118
Files
-
40790fcc458de2a303f7071e2ab7565c_JaffaCakes118.exe windows:4 windows x86 arch:x86
aa52b0f600ef319c4b3a3118889fd76b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
LoadLibraryA
CreateFileA
CloseHandle
GetCurrentProcess
ExitProcess
user32
CreateWindowExA
SetWindowLongA
CharLowerBuffA
CloseWindow
wsprintfA
advapi32
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegSetValueA
RegEnumValueA
Sections
.text Size: 4KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ