Static task
static1
Behavioral task
behavioral1
Sample
444bd1dff5556bfedb71927761404661_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
444bd1dff5556bfedb71927761404661_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
444bd1dff5556bfedb71927761404661_JaffaCakes118
-
Size
58KB
-
MD5
444bd1dff5556bfedb71927761404661
-
SHA1
dc8c00bf6f2e7bdda9c2a37b9a91a2781e836239
-
SHA256
eb9d8d134b28470ff3292d541ebc9298144796eb70a07f9264a557cb7078c555
-
SHA512
ba1f02ba8b2869c90b223a3558c1aa634060b6758115fe7dac457b10234ee7906da3a102e77c49fe5885478b56a4f6709cb0bbaa040d98567277382f83441c9b
-
SSDEEP
768:bw829ZiUzAr4rS6heyY1soCG4IXXLrXhYGJYStd+0m1UmMsPOq:k82bi4uSS6MyYuoqIXXLrXzuef9j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 444bd1dff5556bfedb71927761404661_JaffaCakes118
Files
-
444bd1dff5556bfedb71927761404661_JaffaCakes118.exe windows:4 windows x86 arch:x86
ea9083d6daf4a96a9f4175e7977aa0a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceW
CreateMutexA
CloseHandle
TlsGetValue
GetStdHandle
GetModuleHandleA
SetLastError
LoadLibraryExA
GetProcessHeap
lstrcpyA
GetEnvironmentVariableA
CreateFileW
lstrlenW
HeapCreate
GlobalUnlock
ReleaseMutex
GlobalFree
GetCurrentThreadId
GetExitCodeProcess
UnmapViewOfFile
user32
CallWindowProcA
GetCaretPos
CreateWindowExA
GetDlgItem
CheckRadioButton
IsWindow
GetDC
FillRect
CreateMenu
DrawEdge
SetFocus
DispatchMessageA
DrawMenuBar
rsaenh
CPDecrypt
CPDeriveKey
CPGenKey
CPHashData
CPSignHash
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fhodioe Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE