Static task
static1
Behavioral task
behavioral1
Sample
44c0f084ce6f7c3a785f6b112f38e56b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
44c0f084ce6f7c3a785f6b112f38e56b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
44c0f084ce6f7c3a785f6b112f38e56b_JaffaCakes118
-
Size
65KB
-
MD5
44c0f084ce6f7c3a785f6b112f38e56b
-
SHA1
a8323e8269f208ff8c78c8104dc2216ddfcf5169
-
SHA256
3fbb60124d30811c43db2a0dbad78216e125a644cc79fa50219b529de8d8abbe
-
SHA512
299965f08fc9ed8bf45aa8250101dd602a6044fac660a07ba8ba2550a87f672d7a9fd8538d0ffa2672feaeed178d1c036acaf023b567fde951cb50f144de3946
-
SSDEEP
768:2eVtSTX1fd1cqoDTSm3cPcfnm7V6nQeHU5CzY7lipS5gEo6ymE8f2f9B:2XzqNNRfAeHNsj5gEjxE8f2f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44c0f084ce6f7c3a785f6b112f38e56b_JaffaCakes118
Files
-
44c0f084ce6f7c3a785f6b112f38e56b_JaffaCakes118.exe windows:4 windows x86 arch:x86
e8f13c70ed50894564276b96a006be5f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
advapi32
RegQueryValueExA
RegDeleteKeyA
RegEnumKeyExW
RegCreateKeyExW
RegEnumValueA
RegReplaceKeyW
RegEnumKeyA
RegDeleteValueA
RegQueryValueExW
RegQueryValueW
RegEnumValueW
RegOpenKeyExW
RegCreateKeyExA
RegDeleteValueW
RegReplaceKeyA
RegQueryValueA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegQueryValueA
RegDeleteKeyW
RegEnumKeyW
RegEnumKeyExA
RegLoadKeyW
RegCreateKeyExA
RegOpenKeyA
RegQueryInfoKeyA
RegQueryValueExW
RegEnumValueA
RegQueryValueW
RegEnumKeyExW
RegDeleteKeyA
RegCreateKeyExW
RegQueryValueExA
user32
DrawIconEx
LoadCursorA
GetCursor
AlignRects
CopyImage
DialogBoxParamA
GetDC
InsertMenuA
DrawTextA
CloseWindow
GetWindowTextA
GetWindowTextLengthA
IsWindow
IsMenu
AppendMenuW
BlockInput
DrawIcon
AppendMenuA
DialogBoxParamA
InsertMenuA
DrawTextW
LoadMenuA
BlockInput
AlignRects
CreateIcon
AppendMenuW
CopyImage
EndDialog
GetDlgItem
IsWindow
GetCursor
CopyRect
CopyIcon
GetDC
LoadMenuA
CloseWindow
DialogBoxParamA
GetDlgItem
EndDialog
AppendMenuW
IsWindow
GetWindowTextA
DrawTextW
CopyImage
CopyIcon
IsMenu
BlockInput
GetWindowTextLengthA
CalcMenuBar
CreateIcon
CopyRect
CalcMenuBar
LoadMenuA
DialogBoxParamA
GetMenu
GetWindowTextA
AlignRects
DrawTextA
DrawIcon
GetDC
GetWindowTextLengthA
GetCursor
CopyIcon
DrawTextW
LoadCursorA
CopyImage
IsWindow
InsertMenuA
GetDlgItem
IsWindow
DialogBoxParamA
DrawIcon
AlignRects
GetCursor
DialogBoxParamW
GetMenu
CopyIcon
LoadMenuA
GetDlgItem
BlockInput
AppendMenuA
EndDialog
DrawTextA
LoadCursorA
IsMenu
AppendMenuA
InsertMenuA
CreateIcon
AlignRects
CopyIcon
LoadMenuA
GetWindowTextA
GetCursor
DrawTextW
GetFocus
DialogBoxParamW
GetDlgItem
AppendMenuW
CopyImage
IsWindow
CopyRect
CloseWindow
kernel32
ReadFile
GetComputerNameA
GetLastError
FindFirstFileA
FindAtomA
WriteFile
ReadConsoleA
SetLastError
GetFileTime
OpenFile
CopyFileExW
WriteFile
GetFileTime
Sleep
GetLastError
CopyFileExA
GetStdHandle
DeleteFileW
DeleteFileA
FindFirstFileA
ExitThread
CopyFileW
GetCPInfo
CreateDirectoryA
GetFileSize
CopyFileA
GetConsoleMode
SetLastError
CopyFileExW
comctl32
ImageList_Destroy
ImageList_Replace
ImageList_Remove
ImageList_GetImageCount
ImageList_GetImageRect
ImageList_ReplaceIcon
ImageList_DrawIndirect
ImageList_GetDragImage
ImageList_GetIconSize
ImageList_DragMove
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 163B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ