Static task
static1
Behavioral task
behavioral1
Sample
44a51d7e6b5824729c5820cce235e1c9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
44a51d7e6b5824729c5820cce235e1c9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
44a51d7e6b5824729c5820cce235e1c9_JaffaCakes118
-
Size
305KB
-
MD5
44a51d7e6b5824729c5820cce235e1c9
-
SHA1
4bc8f0e8f6d8aab39031f0cd5a35220f8e47b669
-
SHA256
67ac80ab44ed383c85e2ceedbb821aa19d34f0ae4378a27b1fb56eb23c65959e
-
SHA512
7a67235de58815e91811dec18eb95c52556f05d5a55972c2d6ab6e1fad13d2b9aeff84b8cd9fe908e131fd8798052fe9b63b06d916809da7b64e66ec58ca3df2
-
SSDEEP
6144:ioCYpU7oW0+miXplmBRjg4yLvITY+Xv2t:ioCYpAFzwYITRv2t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44a51d7e6b5824729c5820cce235e1c9_JaffaCakes118
Files
-
44a51d7e6b5824729c5820cce235e1c9_JaffaCakes118.exe windows:4 windows x86 arch:x86
416f2c9b8a6969dbccfde246961f1145
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
memcmp
wcsncpy
swscanf
memcpy
_except_handler3
wcstok
wcscpy
malloc
free
strlen
_wtoi
iswdigit
wcsncmp
wcslen
swprintf
vswprintf
wcsrchr
wcsstr
memmove
_wcsicmp
wcscmp
_wcslwr
wcschr
__CxxFrameHandler
_vsnwprintf
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
_controlfp
kernel32
GetStartupInfoA
GetModuleHandleA
CompareStringW
GetCurrentProcess
SetPriorityClass
GlobalAlloc
GlobalLock
GlobalFree
GetVersionExW
GetTempPathW
lstrcpyW
lstrcatW
FindFirstFileW
CreateFileW
GetFileInformationByHandle
CloseHandle
FindNextFileW
FindClose
GlobalDeleteAtom
FreeLibrary
LoadLibraryW
GlobalAddAtomW
GlobalFindAtomW
MulDiv
InterlockedIncrement
InterlockedDecrement
lstrlenA
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetPrivateProfileStringW
GetPrivateProfileStringA
WritePrivateProfileStringW
GetPrivateProfileIntW
GetModuleFileNameW
CreateDirectoryW
GetFileAttributesW
GetUserDefaultLangID
GetProcAddress
SetLastError
DeleteFileW
user32
DrawTextW
GetSysColor
EndPaint
ScreenToClient
BeginPaint
SetWindowLongW
PtInRect
GetClientRect
KillTimer
InvalidateRect
GetWindowLongW
wsprintfW
RemovePropW
DialogBoxIndirectParamW
SetDlgItemTextW
GetDC
SetFocus
RegisterWindowMessageW
OffsetRect
CopyRect
GetSystemMetrics
ClientToScreen
MoveWindow
EndDialog
SetWindowTextW
SendMessageW
GetDlgItem
EnableWindow
ShowWindow
GetParent
GetWindowRect
SystemParametersInfoW
SetWindowPos
SendDlgItemMessageW
FindWindowW
ReleaseDC
CreateWindowExW
LoadStringW
PostMessageW
LoadIconW
SetTimer
GetPropW
SetPropW
gdi32
BitBlt
SetBkColor
ExtTextOutW
SetBkMode
SetTextColor
SelectObject
CreateCompatibleBitmap
CreateFontW
DeleteObject
DeleteDC
CreateCompatibleDC
GetTextExtentPoint32W
GetTextMetricsW
advapi32
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegCloseKey
RegCreateKeyW
RegSetValueExA
RegOpenKeyExW
RegQueryValueExW
shell32
ShellExecuteW
SHChangeNotify
ole32
CLSIDFromString
CoGetObject
CoInitialize
CoUninitialize
StringFromGUID2
CoCreateInstance
oleaut32
SysFreeString
SysAllocStringLen
SysStringLen
SysAllocString
comctl32
PropertySheetW
Sections
.text Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ