Static task
static1
Behavioral task
behavioral1
Sample
44fa7496cd9c8e7916022e67722c6958_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
44fa7496cd9c8e7916022e67722c6958_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
44fa7496cd9c8e7916022e67722c6958_JaffaCakes118
-
Size
305KB
-
MD5
44fa7496cd9c8e7916022e67722c6958
-
SHA1
f993b1624869c715dfeba10ecec4667a93d0b348
-
SHA256
cf4e2c4fe7fe4839fa32676752a75496287c2101df7d79af926410eb13f863e9
-
SHA512
b9659175f389e76ae7c3ad9abdf7e4ff591c90f93c54dab50ef7e45c3a4637ff695bcaf2722991e7ed25482b698e61262427a6595863132ba38561500c36366d
-
SSDEEP
6144:189fDIf+CDDO5kQoPkJ9xiiIep7AzwDzb2RFEdQDClqv2C4c9a6iW:INOO08MGAcDzbEuiOw+YF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44fa7496cd9c8e7916022e67722c6958_JaffaCakes118
Files
-
44fa7496cd9c8e7916022e67722c6958_JaffaCakes118.exe windows:7 windows x86 arch:x86
a235de2d8f5c60e10e6957c8c06038ee
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advpack
CloseINFEngine
TranslateInfStringEx
NeedRebootInit
FileSaveRestore
SetPerUserSecValues
RunSetupCommand
LaunchINFSectionEx
RegSaveRestore
RegSaveRestoreOnINF
IsNTAdmin
UserInstStubWrapper
OpenINFEngine
FileSaveMarkNotExist
GetVersionFromFile
DoInfInstall
LaunchINFSection
RegInstall
TranslateInfString
DelNode
ExtractFiles
NeedReboot
GetVersionFromFileEx
DelNodeRunDLL32
AddDelBackupEntry
RebootCheckOnInstall
RegRestoreAll
AdvInstallFile
ExecuteCab
FileSaveRestoreOnINF
RegisterOCX
UserUnInstStubWrapper
user32
GetSysColorBrush
LoadCursorA
IsClipboardFormatAvailable
TranslateMessage
BeginPaint
DialogBoxParamA
GetWindowRect
InvalidateRect
LoadAcceleratorsA
LoadMenuA
ScreenToClient
DestroyWindow
ChildWindowFromPoint
CharNextA
CreateWindowExA
OffsetRect
GetWindowTextA
GetProcessDefaultLayout
LoadIconA
UpdateWindow
GetWindowLongA
MessageBeep
SystemParametersInfoA
PostQuitMessage
SendMessageA
WinHelpA
SetWindowLongA
GetMenu
EnableMenuItem
DestroyMenu
CheckDlgButton
CloseClipboard
SetMenu
EndDialog
CheckMenuRadioItem
MapWindowPoints
SetWindowPos
SetCursor
GetDlgItem
DispatchMessageA
TrackPopupMenuEx
GetSubMenu
GetSysColor
GetMessageA
DefWindowProcA
CheckMenuItem
GetDlgCtrlID
IsChild
GetClipboardData
SetDlgItemTextA
SetWindowTextA
RegisterClassExA
GetDesktopWindow
TranslateAcceleratorA
HideCaret
EnableWindow
SetFocus
SetProcessDefaultLayout
CreateDialogParamA
OpenClipboard
ShowWindow
MessageBoxA
EndPaint
GetClientRect
SetDlgItemInt
CheckRadioButton
kernel32
DeleteFileA
lstrcpyA
GetFileAttributesA
WriteFileGather
GetSystemTimes
GetNamedPipeInfo
PeekNamedPipe
HeapAlloc
lstrcmpA
InterlockedPopEntrySList
WaitNamedPipeA
SetEnvironmentVariableA
GetFileAttributesExA
GetFirmwareEnvironmentVariableA
InterlockedCompareExchange
IsBadStringPtrA
lstrcpynA
GetStringTypeA
CreateFileA
GetSystemTime
GetProcessHeaps
HeapSize
InterlockedExchangeAdd
lstrlenA
FileTimeToSystemTime
ReadFileScatter
VirtualAlloc
InterlockedFlushSList
GetSystemTimeAdjustment
DosDateTimeToFileTime
GetProcessHeap
CloseHandle
VirtualFree
WriteFile
lstrcmpiA
SetFilePointer
GetLocalTime
TransactNamedPipe
SetFirmwareEnvironmentVariableA
lstrcatA
FileTimeToLocalFileTime
GetNamedPipeHandleStateA
InterlockedIncrement
ConnectNamedPipe
InterlockedDecrement
ReadFileEx
ExpandEnvironmentStringsA
DisconnectNamedPipe
GetEnvironmentVariableA
CallNamedPipeA
GetModuleHandleA
FileTimeToDosDateTime
CompareStringA
InterlockedExchange
GetFileTime
SetNamedPipeHandleState
WriteFileEx
GetEnvironmentStringsA
GetStringTypeExA
SystemTimeToFileTime
ReadFile
FreeEnvironmentStringsA
InterlockedPushEntrySList
GetSystemTimeAsFileTime
cryptui
CryptUIWizExport
CryptUIDlgViewCTLA
ACUIProviderInvokeUI
CryptUIGetViewSignaturesPagesA
CryptUIDlgSelectStoreA
CryptUIDlgSelectCertificateA
CryptUIGetCertificatePropertiesPagesA
LocalEnrollNoDS
RetrievePKCS7FromCA
CryptUIDlgViewSignerInfoA
DllUnregisterServer
DllRegisterServer
CryptUIFreeCertificatePropertiesPagesA
CryptUIDlgViewContext
LocalEnroll
CryptUIDlgFreeCAContext
EnrollmentCOMObjectFactory_getInstance
I_CryptUIProtectFailure
CryptUIWizCreateCertRequestNoDS
CryptUIWizFreeCertRequestNoDS
CryptUIDlgViewCRLA
CryptUIDlgViewCertificateA
CryptUIDlgViewCertificatePropertiesA
CryptUIDlgSelectCertificateFromStore
CryptUIWizFreeDigitalSignContext
CryptUIWizDigitalSign
WizardFree
CryptUIWizSubmitCertRequestNoDS
CryptUIDlgCertMgr
I_CryptUIProtect
CryptUIDlgSelectCA
CryptUIWizCertRequest
CryptUIWizImport
CryptUIWizQueryCertRequestNoDS
CryptUIFreeViewSignaturesPagesA
CryptUIStartCertMgr
CryptUIWizBuildCTL
Sections
.text Size: 274KB - Virtual size: 274KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 732KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ