Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_40b4f77308772ba74d7e44905d9d0802.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_40b4f77308772ba74d7e44905d9d0802.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_40b4f77308772ba74d7e44905d9d0802
-
Size
14.9MB
-
MD5
40b4f77308772ba74d7e44905d9d0802
-
SHA1
3298eca6413ecb835ebc4b2883aa5a117fa0fb45
-
SHA256
8a02b485f82fcf55b775350e77c3fc0a1d1bdc514e984342e5da21998c373ae5
-
SHA512
dc38793f92936c5aabeadbdb63dc4c1019bb1f0c4af51940a986d7c986349ee4429d3f6018efa5877a1adbd9ea068f3dbae2f480c89cc9fb7e5e3b9cff7ff259
-
SSDEEP
1536:3VZK1I9rn2BHELrWh9iuDdJm7CyY8rhGDNDxTWNdUhUFIq:bK1Mn2BHsrt4mYnrMdUh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_40b4f77308772ba74d7e44905d9d0802
Files
-
JaffaCakes118_40b4f77308772ba74d7e44905d9d0802.exe windows:5 windows x86 arch:x86
eea35c08b4b314e861faff49bf279746
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
DispatchMessageW
IsDialogMessageW
DrawStateA
GetMessageW
LoadIconA
DialogBoxParamA
PostMessageW
PeekMessageA
LoadBitmapW
IsCharLowerW
GetClassLongA
LoadCursorA
dsprop
CheckADsError
ErrMsg
advapi32
OpenServiceA
RegSaveKeyA
InitializeAcl
RegLoadKeyW
RegOpenKeyA
RegDeleteValueW
CryptSignHashW
RegRestoreKeyW
RegEnumKeyW
RegCloseKey
GetUserNameA
RegUnLoadKeyA
RegCreateKeyExW
authz
AuthzFreeAuditEvent
AuthzAddSidsToContext
esent
JetBeginTransaction
JetCloseTable
JetCloseDatabase
shell32
DragAcceptFiles
ShellAboutA
SHGetFolderPathW
SHGetDataFromIDListW
ShellExecuteA
FindExecutableW
SHGetMalloc
ExtractIconA
SHGetFileInfoA
DragFinish
DllGetClassObject
ShellExecuteA
DragQueryFileW
ShellMessageBoxW
SHDefExtractIconA
StrChrW
StrStrW
cryptdll
CDLocateRng
MD5Update
MD5Init
CDBuildVect
MD5Final
shlwapi
UrlCanonicalizeA
UrlUnescapeA
PathIsRootW
UrlGetLocationA
PathCommonPrefixA
PathCombineA
UrlHashA
UrlCompareA
UrlIsA
UrlCreateFromPathA
UrlEscapeW
kernel32
ExitProcess
InterlockedIncrement
GetDateFormatW
OpenJobObjectA
GetModuleHandleA
FindFirstFileA
LoadLibraryA
SleepEx
GetLongPathNameA
GetLastError
MoveFileExA
GetWindowsDirectoryA
GetShortPathNameW
SetLocalTime
VirtualAlloc
CreateMutexA
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.ipa Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_WRITE
.wat Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14.8MB - Virtual size: 1KB
IMAGE_SCN_MEM_READ