Static task
static1
Behavioral task
behavioral1
Sample
44d58274c972fbf7e2e7b248d1ff5cd4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
44d58274c972fbf7e2e7b248d1ff5cd4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
44d58274c972fbf7e2e7b248d1ff5cd4_JaffaCakes118
-
Size
369KB
-
MD5
44d58274c972fbf7e2e7b248d1ff5cd4
-
SHA1
293c3557fb94d668260b6300c2adfb2231ecae8d
-
SHA256
53bddef7ffe820c20d0870dc0a82dd0e8ef6be724ade25d52a021f666c5f1e4c
-
SHA512
b953e99e506b46281c60aa77609045181fe8b0122732daa9e0456d225a61681a09a53c760cdb6a13feb31ac842f913afe05a55debd33c80e567e02e9d615880d
-
SSDEEP
6144:FRRMCpV7tgYauP+lkqAoR/f5bdzzHsXeaqcDEXrPeaMRD8A5792Ph1172N:FRRMCn5gMWkcN5S0cDYTea8gU2h772
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44d58274c972fbf7e2e7b248d1ff5cd4_JaffaCakes118
Files
-
44d58274c972fbf7e2e7b248d1ff5cd4_JaffaCakes118.exe windows:4 windows x86 arch:x86
975bb7787b434452c29c7b5bf8b9cc34
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
EnumCalendarInfoA
GetNumberFormatA
GetCurrentProcessId
lstrlenW
GetPrivateProfileStringA
FindAtomA
GetConsoleAliasA
GetModuleHandleA
TlsGetValue
FindClose
HeapCreate
EnterCriticalSection
ReadFile
GetCurrentThreadId
CreateEventW
LocalFlags
GetDriveTypeW
ResumeThread
LocalFree
user32
IsWindow
GetCursorInfo
DispatchMessageA
GetKeyboardType
CallWindowProcW
DrawTextA
GetSysColor
SetFocus
GetClassInfoA
GetMenuInfo
GetKeyState
DispatchMessageA
GetClientRect
stclient
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
ntshrui
IsPathSharedA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 359KB - Virtual size: 358KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ