Static task
static1
Behavioral task
behavioral1
Sample
44ff2f14f8a92396e4d8e126263c5357_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
44ff2f14f8a92396e4d8e126263c5357_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
44ff2f14f8a92396e4d8e126263c5357_JaffaCakes118
-
Size
183KB
-
MD5
44ff2f14f8a92396e4d8e126263c5357
-
SHA1
4cf05d61919bbfdf898331850480f93f932b5275
-
SHA256
e391b6ea8aea177ab2d293d7b10fdc7a543a3767458d4a0a159a66e4b9061d61
-
SHA512
b6d277c51ba0a4042bd707b82fec94fc95a83dbf911178c068f385c8d0d63d7406ff609b962e7fa20b905ce8bf3bd1ae3bdf1e92eee4960849a0ebb9d0124610
-
SSDEEP
1536:h47r9dk/M5FkgCk0AsZL7wUND8PkAuJ4mXXX8sRPjmlSO/2tCtLJ7Vx2wyzlY2bB:hYjrFVSh7wUl4cB9SPutChJ7VczlNlk8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44ff2f14f8a92396e4d8e126263c5357_JaffaCakes118
Files
-
44ff2f14f8a92396e4d8e126263c5357_JaffaCakes118.exe windows:4 windows x86 arch:x86
6fa9dfabdae78b1ea18da4940ebf9f44
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetSetCookieA
ws2_32
sendto
WSACreateEvent
WSAEventSelect
WSAWaitForMultipleEvents
WSAResetEvent
WSACloseEvent
socket
WSAGetLastError
htons
closesocket
inet_addr
inet_ntoa
WSAEnumNetworkEvents
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
iphlpapi
GetAdaptersInfo
kernel32
LocalFree
GetStartupInfoA
ExitProcess
QueryPerformanceCounter
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
FlushInstructionCache
GetCurrentProcess
HeapAlloc
GetProcessHeap
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
CloseHandle
OpenMutexA
CreateEventA
WaitForSingleObject
SetEvent
WaitForMultipleObjects
SetEnvironmentVariableA
GetEnvironmentVariableA
lstrlenA
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
ResetEvent
CreateThread
GetLastError
CreateMutexA
WideCharToMultiByte
lstrlenW
HeapFree
GetFileAttributesA
MoveFileA
DeleteFileA
GetModuleFileNameA
WriteFile
CreateFileA
ReadFile
GetPrivateProfileIntA
GetPrivateProfileStringA
GetVolumeInformationA
GetTickCount
WritePrivateProfileStringA
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetCurrentProcessId
user32
IsIconic
GetLastActivePopup
SetFocus
SetForegroundWindow
SystemParametersInfoA
GetActiveWindow
KillTimer
GetWindowThreadProcessId
BringWindowToTop
AttachThreadInput
SetActiveWindow
SetClassLongA
GetClassNameA
GetClassLongA
DeleteMenu
CallWindowProcA
GetWindowLongA
IsWindowEnabled
SetRectEmpty
SetWindowTextA
PostQuitMessage
GetWindow
SetWindowPos
LoadImageA
SetTimer
FlashWindowEx
GetForegroundWindow
GetSystemMetrics
GetClientRect
ClientToScreen
SendMessageA
IsWindowVisible
MoveWindow
GetSystemMenu
CopyRect
RegisterWindowMessageA
DefWindowProcA
DestroyWindow
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
CreateWindowExA
IsWindow
ShowWindow
PostMessageA
SetWindowLongA
gdi32
DeleteObject
CreateSolidBrush
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
ole32
OleInitialize
OleUninitialize
CoCreateInstance
oleaut32
DispCallFunc
SysStringLen
LoadTypeLi
LoadRegTypeLi
SysAllocStringLen
VariantClear
VariantCopy
VariantInit
VarBstrCmp
VarBstrCat
SysAllocString
SysFreeString
atl71
ord58
ord32
ord31
ord11
ord10
ord42
ord54
ord23
ord65
ord46
ord64
ord44
ord43
ord66
ord61
ord30
comctl32
InitCommonControlsEx
msvcp71
?clear@ios_base@std@@QAEXH_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?uncaught_exception@std@@YA_NXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?_Lock@_Mutex@std@@QAEXXZ
?_Unlock@_Mutex@std@@QAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?_Nomemory@std@@YAXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
msvcr71
_itoa
_CxxThrowException
_except_handler3
free
malloc
??0exception@@QAE@ABV0@@Z
??3@YAXPAX@Z
??_V@YAXPAX@Z
_resetstkoflw
sprintf
_mbsnbcpy
_mbsrchr
??1exception@@UAE@XZ
??0exception@@QAE@XZ
atoi
time
realloc
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
_purecall
rand
srand
strrchr
_ultoa
atol
memset
_callnewh
??1type_info@@UAE@XZ
__dllonexit
_onexit
?terminate@@YAXXZ
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__security_error_handler
_controlfp
_stricmp
__CxxFrameHandler
Sections
.text Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE