Static task
static1
Behavioral task
behavioral1
Sample
e77da23b6b321647efd9d3a5038cfd03_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e77da23b6b321647efd9d3a5038cfd03_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e77da23b6b321647efd9d3a5038cfd03_JaffaCakes118
-
Size
365KB
-
MD5
e77da23b6b321647efd9d3a5038cfd03
-
SHA1
cbc01d445eac4f4c62ee90168ecb36ecbc8b24e0
-
SHA256
b1449b9ab22d5246c9817097fb68a00bb4ea958d9a47a05c90cfe5d44e2bedc3
-
SHA512
687244e99cfe2a401cfd6f3afe7c55b50231828a0339b0415d23e037088e9bd39ea497d65d1d7b44bf83834fee4a5b2107dd1eb35bdec156171f54b6adc85551
-
SSDEEP
6144:rgZXQJJ2p2vBpdgMi1BsyFYlm0y0gXsrky0MhCzB/QELVSAg:rgZX0I2uMi1BPFybgcAyJCzBIKS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e77da23b6b321647efd9d3a5038cfd03_JaffaCakes118
Files
-
e77da23b6b321647efd9d3a5038cfd03_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9810b9772c7b47f02e392bdb47027e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClipboardViewer
ModifyMenuA
SetSystemCursor
GetScrollBarInfo
GetSysColorBrush
SetMenuInfo
DefMDIChildProcA
EnumDisplaySettingsW
SetCursor
DialogBoxParamW
CreatePopupMenu
GetMessageW
GetPriorityClipboardFormat
GetCursorInfo
SendIMEMessageExA
ShowWindowAsync
GetWindowTextW
OpenIcon
RegisterClassA
GetScrollInfo
RegisterClassExA
comctl32
InitCommonControlsEx
kernel32
TerminateProcess
GetModuleFileNameA
VirtualQuery
HeapFree
GetProcAddress
GetCurrentProcess
GetSystemInfo
MoveFileExA
GetStdHandle
GetStartupInfoA
WideCharToMultiByte
GetOEMCP
GetEnvironmentStringsW
RtlZeroMemory
SetFileTime
InterlockedExchange
GetTimeFormatA
GetTimeZoneInformation
RemoveDirectoryW
HeapReAlloc
VirtualAlloc
GetVersionExA
CompareStringW
GetLocaleInfoA
FlushFileBuffers
CloseHandle
VirtualProtect
SetHandleCount
GetCPInfo
GetCommandLineA
GetStartupInfoW
WriteFile
FreeEnvironmentStringsA
CreateSemaphoreA
GetLocaleInfoW
QueryPerformanceCounter
IsBadWritePtr
GetVolumeInformationW
InitializeCriticalSection
GetModuleHandleA
DeleteCriticalSection
GetLastError
ReadFile
GetTickCount
CreateMutexA
GetDateFormatA
WaitForMultipleObjectsEx
HeapDestroy
TlsGetValue
GetCurrentThreadId
SetEnvironmentVariableA
GetStringTypeW
EnumSystemLocalesA
UnmapViewOfFile
CompareStringA
WriteProfileStringA
RtlMoveMemory
GetCurrentProcessId
LCMapStringA
GetACP
IsValidLocale
MultiByteToWideChar
EnterCriticalSection
LCMapStringW
UnhandledExceptionFilter
FindNextChangeNotification
TlsAlloc
SetStdHandle
FindClose
TlsFree
OpenMutexA
LocalLock
SetFilePointer
ReadConsoleInputA
LocalReAlloc
GetStringTypeA
GetCommandLineW
LeaveCriticalSection
SetLastError
ExitProcess
IsValidCodePage
RtlUnwind
GetUserDefaultLCID
GetSystemTimeAsFileTime
HeapSize
VirtualFree
HeapAlloc
TlsSetValue
GetEnvironmentStrings
GetLogicalDriveStringsW
HeapCreate
GetCurrentThread
GetModuleFileNameW
ExpandEnvironmentStringsA
GetFileType
WriteProfileSectionW
FreeEnvironmentStringsW
LoadLibraryA
GetVolumeInformationA
gdi32
CreateFontW
SetBkMode
GetCurrentObject
GetViewportOrgEx
SetStretchBltMode
AbortPath
Sections
.text Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ