Static task
static1
Behavioral task
behavioral1
Sample
044daee35517f5595fba41d7eab29f3c_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
044daee35517f5595fba41d7eab29f3c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
044daee35517f5595fba41d7eab29f3c_JaffaCakes118
-
Size
45KB
-
MD5
044daee35517f5595fba41d7eab29f3c
-
SHA1
669c09054cc9d1a52cb5f2e9fee4f84130f90a18
-
SHA256
b6c687ae7d5b178407700fe34a663ecfaee5e0c4ccfe641329d526f6ec350468
-
SHA512
261bdb44919fb55c006a32d017a70462bcc1f72d03b254622d04e406496d7a164a66c4cf6501737ff2516817393d224bf4cdd3703018c331463e85f6b0dcbc9f
-
SSDEEP
384:l+9byEU1amXxvDym2YbkMD6c0dplNQ7bHZpPqCy+/Yv05Y3EMQxbh:kGNlBvfkM2ckN0TS/EMQX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 044daee35517f5595fba41d7eab29f3c_JaffaCakes118
Files
-
044daee35517f5595fba41d7eab29f3c_JaffaCakes118.exe windows:1 windows x86 arch:x86
89c7b59d19cd1f9c8c9192e7f5e0bd34
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
LeaveCriticalSection
HeapFree
TerminateProcess
ReadFile
GetSystemTimeAsFileTime
GetProcessHeap
ExitProcess
GetCurrentProcessId
GetLastError
lstrlenW
WideCharToMultiByte
QueryPerformanceCounter
GetModuleHandleA
LoadLibraryA
InitializeCriticalSection
WriteFile
LocalFree
LocalAlloc
GetProcessHeap
LeaveCriticalSection
SetFilePointer
HeapFree
LoadLibraryA
InterlockedIncrement
Sections
.data Size: 34KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE