Static task
static1
Behavioral task
behavioral1
Sample
40550e4313decb096d6300d7bc0e006f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
40550e4313decb096d6300d7bc0e006f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
40550e4313decb096d6300d7bc0e006f_JaffaCakes118
-
Size
332KB
-
MD5
40550e4313decb096d6300d7bc0e006f
-
SHA1
2d7154c146ba334d7f6862df6df9cebd89863ff2
-
SHA256
0e73a69cb50ed4cc7e45c5b5913b7ed3b0b2ecb5ac946e0be78f026622bde396
-
SHA512
1a3a903d4949a19acb2ca9adb09ce83432f5c28d017655a4a9f30bce111f293c78a38c920e81272f26577999d3dc099d8bcbfc78fd0c0ee6cd80c6bb0913ce2e
-
SSDEEP
6144:7cMG0Cmis0NH8A3/1uz7uodnIm5KJHLqreJDckzrYk/:AMZas0NcAvAzyQnR5KJHWreJRrY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 40550e4313decb096d6300d7bc0e006f_JaffaCakes118
Files
-
40550e4313decb096d6300d7bc0e006f_JaffaCakes118.exe windows:4 windows x86 arch:x86
7e80bb2ba5a5605107e2e82853bd32db
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateIconFromResource
SendMessageA
CreateIconFromResourceEx
advapi32
SetNamedSecurityInfoA
GetFileSecurityA
GetTrusteeTypeA
GetTrusteeFormA
version
VerInstallFileA
mpr
WNetGetProviderNameA
WNetDisconnectDialog1A
WNetAddConnectionA
kernel32
MapViewOfFile
GetTimeFormatA
Thread32Next
CreateMutexW
mfc42
ord3738
ord4424
ord1045
ord4080
ord1576
ord561
ord5731
ord3079
ord3825
ord3831
ord3830
ord1046
ord2976
ord3081
ord2985
ord3262
ord1080
ord4465
ord3259
ord1023
ord2982
ord1040
ord5714
ord1029
ord815
ord6375
ord4486
ord1051
ord1059
ord1168
ord3922
ord1089
ord1091
ord2396
ord1018
ord1046
ord5302
ord2725
ord1046
ord1091
ord5307
Sections
.text Size: 192KB - Virtual size: 191KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ