Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_40bec10104b213d99983caec70e6e348.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_40bec10104b213d99983caec70e6e348
-
Size
653KB
-
MD5
40bec10104b213d99983caec70e6e348
-
SHA1
e2b6f3202589f8309d3731300da9b7f01f972cdc
-
SHA256
018094b89c13f7d35a068cfc6ab6fbb012e9588ee9d93ebad8ecc4e2a95d9878
-
SHA512
591b32a20d6bfdae85ca4cba8c2247008042ac0ede23c150f429a954a450ced04627a229009df93161217335a9d5d12f136a82b9954f095239936e316762907b
-
SSDEEP
12288:pNpbGph0W2KjUnD0CbEFsifQciGVU22536xIPjtnYkZKiUzd0FHgZgA4Wzoxl:gpn+YQc8oOBYkZKisd0yZgA47l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_40bec10104b213d99983caec70e6e348
Files
-
JaffaCakes118_40bec10104b213d99983caec70e6e348.exe windows:5 windows x86 arch:x86
d6a799ff8926c34f0d48a820e9b1d72c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
lstrcpyW
FlushInstructionCache
GetCurrentProcess
lstrcmpW
lstrcpynA
lstrlenA
lstrcpynW
LockResource
SetLastError
LoadLibraryA
IsBadReadPtr
GetStringTypeW
LCMapStringW
GetConsoleMode
GetConsoleCP
SetFilePointer
WideCharToMultiByte
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LoadLibraryExW
GetStdHandle
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetStartupInfoW
HeapSetInformation
GetCommandLineW
DecodePointer
EncodePointer
RtlUnwind
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedCompareExchange
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
VirtualAlloc
VirtualFree
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
MulDiv
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
lstrlenW
GetVersionExW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
RaiseException
LoadLibraryW
FreeLibrary
GetProcAddress
SystemTimeToFileTime
CreateMutexA
SetStdHandle
WriteConsoleW
FlushFileBuffers
Sleep
GetProcessHeap
IsProcessorFeaturePresent
GetTickCount
GetTempPathW
GetTempFileNameW
CreateFileW
GetSystemTime
WriteFile
CloseHandle
GetVersion
GetCurrentThreadId
GetModuleHandleA
OpenEventW
GetCurrentProcessId
GetProcessVersion
OpenMutexW
GetModuleHandleW
GetLastError
OpenMutexA
HeapCreate
WaitForSingleObject
user32
EndDialog
GetWindow
MonitorFromWindow
GetDC
RegisterClassExW
ShowWindow
RemoveMenu
AppendMenuW
CreatePopupMenu
DialogBoxParamW
LoadStringA
PostQuitMessage
LoadStringW
GetWindowRect
TranslateAcceleratorW
SetMenuDefaultItem
GetClassInfoExW
SetMenu
GetMenu
DestroyWindow
LoadImageW
LoadBitmapW
PeekMessageW
IsMenu
SetWindowsHookExW
GetClassNameW
CallNextHookEx
GetKeyState
CharLowerW
UnhookWindowsHookEx
InflateRect
RegisterWindowMessageW
TrackPopupMenuEx
WindowFromPoint
MessageBeep
FrameRect
ModifyMenuW
MonitorFromPoint
GetMonitorInfoW
DrawFrameControl
SetMenuItemInfoW
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetActiveWindow
GetWindowThreadProcessId
IsWindowEnabled
IsWindowVisible
MapWindowPoints
PostMessageW
DestroyMenu
GetCapture
SetCursor
ReleaseDC
GetWindowDC
SystemParametersInfoW
GetMessagePos
PtInRect
ReleaseCapture
SetCapture
UpdateWindow
ScreenToClient
OffsetRect
EndPaint
BeginPaint
SetRect
DrawEdge
DrawTextW
FillRect
CallWindowProcW
GetParent
SetFocus
InvalidateRect
GetClientRect
SetWindowPos
SendMessageW
CreateWindowExW
SetRectEmpty
LoadCursorW
CharNextW
DefWindowProcW
IsWindow
GetWindowLongW
SetWindowLongW
GetDesktopWindow
GetSysColorBrush
GetSysColor
GetFocus
GetForegroundWindow
GetCursor
GetSystemMetrics
GetSubMenu
UnregisterClassA
gdi32
GetCurrentObject
CreateDIBSection
SetBkColor
SetBrushOrgEx
CreateFontIndirectW
CreateCompatibleBitmap
BitBlt
CreateCompatibleDC
CreateBitmap
CreatePatternBrush
PatBlt
DeleteDC
LineTo
MoveToEx
CreatePen
SetTextColor
SetBkMode
GetStockObject
DeleteObject
SelectObject
GetObjectW
ole32
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
oleaut32
VarUI4FromStr
advapi32
RegOpenKeyExW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegCreateKeyExW
comctl32
ImageList_Destroy
ImageList_GetImageCount
ImageList_Draw
ImageList_DrawIndirect
CreateStatusWindowW
ord8
ImageList_Create
ImageList_LoadImageW
InitCommonControlsEx
ImageList_AddMasked
Sections
.text Size: 155KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 436KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ