Static task
static1
Behavioral task
behavioral1
Sample
44796d1a68654c914f1a2b9d686dc7d0_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
44796d1a68654c914f1a2b9d686dc7d0_JaffaCakes118
-
Size
2.4MB
-
MD5
44796d1a68654c914f1a2b9d686dc7d0
-
SHA1
d028d3c83056506858fc90c2c6578157abbf5d24
-
SHA256
26387d3517ce3893f638cb74636b39d53e54c05a1da6f74e744c367b2c929826
-
SHA512
4ce2f71b122b54552b92eb665e9f2877053b23883e4c1364801268df3dd256ee2f9ad9ec924ad0d92e0ef10ba555a2b75fe9b19535a641929e571674e40ab636
-
SSDEEP
49152:S3xAXmSkNW4IMf1tziTqPt638mdrctXCPmf7qpOJVFFfx:S3+1fu1VWq16zlWf7FFfx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44796d1a68654c914f1a2b9d686dc7d0_JaffaCakes118
Files
-
44796d1a68654c914f1a2b9d686dc7d0_JaffaCakes118.exe windows:5 windows x86 arch:x86
00346697d7f99a79cd8d9a491da8c01d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
SetMenuItemBitmaps
gdi32
TextOutW
msimg32
TransparentBlt
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
advapi32
RegEnumKeyW
shell32
ShellExecuteW
comctl32
InitCommonControlsEx
shlwapi
StrFormatByteSizeW
ole32
RevokeDragDrop
oleaut32
OleLoadPicturePath
wininet
InternetSetOptionW
msi
ord141
psapi
GetProcessImageFileNameW
version
GetFileVersionInfoW
uxtheme
DrawThemeParentBackground
dbghelp
MiniDumpWriteDump
crypt32
CertGetCertificateContextProperty
wintrust
WTHelperGetProvCertFromChain
gdiplus
GdipDrawImageI
imm32
ImmGetOpenStatus
winmm
PlaySoundW
Sections
.text Size: 1.8MB - Virtual size: 7.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 628KB - Virtual size: 628KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE