Static task
static1
Behavioral task
behavioral1
Sample
44627b072dd03c8bfacaaf88f4298b75_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
44627b072dd03c8bfacaaf88f4298b75_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
44627b072dd03c8bfacaaf88f4298b75_JaffaCakes118
-
Size
159KB
-
MD5
44627b072dd03c8bfacaaf88f4298b75
-
SHA1
534261ece55d02badc509ebbc40d42801f0ad18a
-
SHA256
623ae2968806bda18fd977713636904594959f66799c1764202d0e9b305a0ba2
-
SHA512
d67c554dfe59393fd846d9b1bac7f0d74b9eceb4802724359055d82b22181209f394e34f3e1a662331f342330a02cdaa13ce672a0b1a95b21d6865064a958e1d
-
SSDEEP
3072:d4d6CHr5z1JJVw/+GNytfGsWAuoSbvHLuEAYc4Qqs0Tm:d4d6slz1jVw/t4fNWhoqP214fm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44627b072dd03c8bfacaaf88f4298b75_JaffaCakes118
Files
-
44627b072dd03c8bfacaaf88f4298b75_JaffaCakes118.exe windows:4 windows x86 arch:x86
2f87b596498683cb513bda21fcfb74f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
newdev
UpdateDriverForPlugAndPlayDevicesW
kernel32
GetStartupInfoA
TlsSetValue
GetCurrentProcess
InterlockedExchange
AddAtomA
FreeEnvironmentStringsW
GetCurrentProcessId
TlsAlloc
HeapSize
HeapDestroy
TlsGetValue
GetFileType
VirtualAlloc
HeapCreate
GetLocaleInfoA
FreeEnvironmentStringsA
VirtualQuery
TlsFree
VirtualFree
GetSystemTimeAsFileTime
GetEnvironmentStrings
GetACP
EnumResourceNamesW
UnhandledExceptionFilter
SetEndOfFile
lstrcatW
GetStdHandle
GetModuleFileNameA
GetCPInfo
SetLastError
GetEnvironmentStringsW
QueryPerformanceCounter
TerminateProcess
IsBadWritePtr
GetSystemInfo
GetVersionExA
GetOEMCP
WriteFile
SetHandleCount
SetUnhandledExceptionFilter
iphlpapi
GetIpAddrTable
shell32
SHGetFolderPathW
setupapi
CM_Get_Global_State
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
user32
CreateWindowExW
SendMessageA
GetDlgItem
EnumChildWindows
DestroyWindow
IsWindow
GetWindowThreadProcessId
Sections
.text Size: 78KB - Virtual size: 486KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ