Static task
static1
Behavioral task
behavioral1
Sample
44764ef0027c17cfddba92e980685388_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
44764ef0027c17cfddba92e980685388_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
44764ef0027c17cfddba92e980685388_JaffaCakes118
-
Size
263KB
-
MD5
44764ef0027c17cfddba92e980685388
-
SHA1
e174c972a76d4f6dd33a50d8f79026e6fa203e07
-
SHA256
e7beaac13504a78bab785b5d4d046054789513051318ee82b0d9a6aa6ccaf02b
-
SHA512
8f4a2428c8d07411714a89457fbb8dc64549ed56c76c874ea5d71103b926a5986b80e5801e42ab5ff10c9674cf8684ca7dd364ac1beb45920902c2fe4b58fabc
-
SSDEEP
6144:9GiyCXgCp+PloQSmutalltiqcWDowR4VaaaCaTm:YCgCkPloQSmuIlltRDABaCai
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44764ef0027c17cfddba92e980685388_JaffaCakes118
Files
-
44764ef0027c17cfddba92e980685388_JaffaCakes118.exe windows:4 windows x86 arch:x86
4a21b69cc72058c93df81bd7f66bff3e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetVersion
GetCurrentThreadId
FormatMessageW
GetOEMCP
GetStartupInfoA
QueryPerformanceCounter
DeleteFileW
EnterCriticalSection
SetStdHandle
SetConsoleCP
FreeLibrary
GetLastError
CreateFileW
GetModuleHandleA
GetCurrentProcessId
InterlockedIncrement
GetTickCount
OpenProcess
VirtualQuery
HeapAlloc
VirtualProtect
ExitProcess
GetCommandLineW
GetACP
GlobalUnlock
GetEnvironmentStringsW
SetConsoleCtrlHandler
UnmapViewOfFile
GetEnvironmentVariableW
FormatMessageA
InterlockedExchange
user32
SendMessageW
ReleaseDC
RegisterWindowMessageA
GetSystemMetrics
GetFocus
GetSysColorBrush
ole32
CoMarshalHresult
msvcrt
_wtoi
_lock
??3@YAXPAX@Z
gdi32
PatBlt
SetTextAlign
advapi32
RegCreateKeyExW
RegEnumKeyExA
lz32
LZDone
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 141KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 212B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ