Static task
static1
Behavioral task
behavioral1
Sample
40db0d600046f1829fad9235e2e42f71_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
40db0d600046f1829fad9235e2e42f71_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
40db0d600046f1829fad9235e2e42f71_JaffaCakes118
-
Size
636KB
-
MD5
40db0d600046f1829fad9235e2e42f71
-
SHA1
1bd92af0447c339dfff8528ea6c06514037cbfb7
-
SHA256
323084859c590f82b499641b41f6cda120ae3f29575bcf2efc38d4c396db932f
-
SHA512
0ce6ab21a7e34d87491f8e989d4b089f989479391c1b7330d46eece3238225d88aec3c25459bfb8e3048669f3a254e5588b1dbeaf7603024df53a93814219554
-
SSDEEP
12288:SyWFNcU2j2IK66uxQf0XCFo20551DfE2RRU/pGV44Vg69MwbO+kPzd1lHYi0myMI:UFNcrj2INQf0XCypfE2fUkg6vbKd3Y+x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40db0d600046f1829fad9235e2e42f71_JaffaCakes118
Files
-
40db0d600046f1829fad9235e2e42f71_JaffaCakes118.exe windows:4 windows x86 arch:x86
2299554f4ffee0669f1610408b199f14
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetTickCount
GetSystemDefaultLangID
LoadLibraryExA
lstrlenA
HeapCreate
GetConsoleCP
GetAtomNameA
GetModuleHandleA
CloseHandle
InterlockedExchange
WaitForSingleObject
GetStdHandle
CompareFileTime
VirtualProtect
GetCommandLineA
HeapReAlloc
SetConsoleCP
GlobalUnlock
WaitForMultipleObjects
SuspendThread
user32
GetDlgItem
GetKeyState
FindWindowA
SetScrollInfo
InsertMenuA
FillRect
InvertRect
EnableScrollBar
SetPropA
CreateMenu
CopyImage
DragObject
DialogBoxParamA
DispatchMessageA
DestroyMenu
IsDialogMessage
DrawCaption
SetWindowPos
GetKeyboardLayout
GetCursorInfo
CreateIcon
advapi32
RegCloseKey
RegQueryInfoKeyA
RegCreateKeyExA
RegEnumValueA
RegEnumKeyA
apphelp
ApphelpCheckExe
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ