Static task
static1
Behavioral task
behavioral1
Sample
44bd790f4ea453b25dcaa3f617db382d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
44bd790f4ea453b25dcaa3f617db382d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
44bd790f4ea453b25dcaa3f617db382d_JaffaCakes118
-
Size
117KB
-
MD5
44bd790f4ea453b25dcaa3f617db382d
-
SHA1
1e2e83706827a337d3a71d01ecfb5c509c56e278
-
SHA256
c593c8987852ef7b0b90d69e1e3825bdb9e604f0bf1d343c476be1a3b09d8f33
-
SHA512
60143d12442cf4e4ec3771368b626350a28bd3e1cae32ff1bf5e155aaa957bd405ad677bf68da2c621046b8da36eee094715ef58c09a5c319a80c43e014d6e38
-
SSDEEP
3072:R/8yYbSZ4yuZG3PebtrG/dbYAYZ7TW1SgqeJsSSJjSNMEY:RkyNiQPebtq/dbYzTW1FqaC+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44bd790f4ea453b25dcaa3f617db382d_JaffaCakes118
Files
-
44bd790f4ea453b25dcaa3f617db382d_JaffaCakes118.exe windows:4 windows x86 arch:x86
e7842e4a3958af40c5bb6fe29f21e0b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleacc
LresultFromObject
CreateStdAccessibleObject
kernel32
FreeLibrary
FlushInstructionCache
TerminateProcess
SetEndOfFile
LeaveCriticalSection
CreateThread
GetLocalTime
CloseHandle
ReadFile
SetUnhandledExceptionFilter
DeleteCriticalSection
WriteFile
LocalFree
CreateSemaphoreA
WaitForMultipleObjects
FreeEnvironmentStringsA
EnterCriticalSection
GetLastError
QueryPerformanceCounter
GetStartupInfoA
InterlockedExchange
CreateEventA
WaitForSingleObject
LoadLibraryA
Sleep
CreateFileW
EnumResourceNamesA
UnhandledExceptionFilter
SetFilePointer
GetVersionExA
SetEvent
LocalAlloc
InterlockedCompareExchange
ExitProcess
GetOverlappedResult
GetCurrentProcess
GetDriveTypeW
ResetEvent
lstrlenA
lstrcatA
ReleaseSemaphore
FindFirstFileW
InitializeCriticalSection
FindClose
GetSystemTimeAsFileTime
GetCurrentThread
GetTickCount
Sections
.text Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ