Static task
static1
Behavioral task
behavioral1
Sample
44660fe34b9a0ea8762bf76158001015_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
44660fe34b9a0ea8762bf76158001015_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
44660fe34b9a0ea8762bf76158001015_JaffaCakes118
-
Size
217KB
-
MD5
44660fe34b9a0ea8762bf76158001015
-
SHA1
9c99e189c2e41433960023ca917d365f28cfcf24
-
SHA256
d23276529ddcc0aebc62b7d06d57b168c226b8fcbbbb90b7754035f3d2d623fa
-
SHA512
294e6883d78510cff74a5b908a28d903e104dd37f50c632fade1d7ed939e83487775829ff3606363eef4d302f68d84bc684c0389c71c1aa3d5386264e941e692
-
SSDEEP
6144:Dn84Y5+h+ciULdmXKmpwYUlwGbICaJ4b:r8sYKMZwYk8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44660fe34b9a0ea8762bf76158001015_JaffaCakes118
Files
-
44660fe34b9a0ea8762bf76158001015_JaffaCakes118.exe windows:5 windows x86 arch:x86
fc3e748aa70efbf63dce44577ce1b29e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
InterlockedIncrement
GetStdHandle
GetCurrentProcess
GetCurrentThreadId
IsValidCodePage
InterlockedDecrement
GetTickCount
QueryPerformanceCounter
CompareFileTime
GetSystemTime
GetModuleHandleA
GetCurrentDirectoryA
CreateMutexA
TlsAlloc
GetCurrentProcessId
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetLocalTime
GetModuleFileNameW
GetModuleFileNameA
GetStartupInfoW
shlwapi
PathCommonPrefixW
ole32
OleInitialize
scarddlg
ord2
msvcrt
_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
memcpy
memset
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
Sections
.text Size: 211KB - Virtual size: 210KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ