Static task
static1
Behavioral task
behavioral1
Sample
44302305ced29f158b87ced3d49152e2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
44302305ced29f158b87ced3d49152e2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
44302305ced29f158b87ced3d49152e2_JaffaCakes118
-
Size
51KB
-
MD5
44302305ced29f158b87ced3d49152e2
-
SHA1
9486800f6122c0babdabc35671807d342ea4c1a1
-
SHA256
c577f47c7f6d6252714dc79ccdd605c5feed55dd9109645e02d224af861e3e79
-
SHA512
382171964445140933f57d6cbae18746370d156b69fd31feab3c024a75c28c7ad59d34ad200c112f23340afd8202b7387195e8458e9d3fa77a1a866793faacf7
-
SSDEEP
768:ITeQmcFP5dFUFFsNeFVGPSBqnDgIaZlhAoYp2zezYN03:ITeQbPslGjDibapp2SzYN03
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44302305ced29f158b87ced3d49152e2_JaffaCakes118
Files
-
44302305ced29f158b87ced3d49152e2_JaffaCakes118.exe windows:4 windows x86 arch:x86
042637850a3034529b8820692981de0e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntA
kernel32
ExitProcess
FreeLibrary
LoadLibraryExA
GetPrivateProfileIntA
CloseHandle
SetFilePointer
CreateFileA
GetVolumeInformationA
ReadFile
GetDriveTypeA
GetLogicalDrives
GetTickCount
lstrcpyA
lstrcatA
GetModuleFileNameA
GetModuleHandleA
GetEnvironmentVariableA
GetPrivateProfileStringA
lstrcmpiA
lstrlenA
lstrcmpA
SetErrorMode
user32
SetForegroundWindow
GetAsyncKeyState
SendMessageA
GetWindowTextW
FindWindowA
DispatchMessageA
GetMessageA
MessageBoxA
CreateWindowExA
RegisterClassA
RegisterWindowMessageA
CharNextA
CharNextW
CreatePopupMenu
GetCursorPos
InsertMenuItemA
SetMenuDefaultItem
TrackPopupMenu
DestroyMenu
LoadImageA
DestroyIcon
DefWindowProcA
DestroyWindow
PostQuitMessage
SetTimer
wsprintfA
EnableMenuItem
advapi32
RegCloseKey
RegQueryValueExA
RegDeleteValueA
RegCreateKeyA
RegSetValueExA
RegOpenKeyA
shell32
ShellExecuteA
SHGetSpecialFolderPathA
Shell_NotifyIconW
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE