Static task
static1
Behavioral task
behavioral1
Sample
77b9df4f857a8b207be9eaca43f3b85b_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
77b9df4f857a8b207be9eaca43f3b85b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
77b9df4f857a8b207be9eaca43f3b85b_JaffaCakes118
-
Size
905KB
-
MD5
77b9df4f857a8b207be9eaca43f3b85b
-
SHA1
4bae7dbe055ac82058624d9e19c4c7adf8b3d93a
-
SHA256
d1f55e8da9b241a059b72b2a67507c1050f00466a61a127983f6984a8253cfcd
-
SHA512
74c78f39371b95448ea18a35a3b27f27dce9f8203b5f5f01910dd5c6437e65d2a345e3755b8c292a290892aad3c4dc0e91d561657098b1657c54e104bc6b38bb
-
SSDEEP
12288:mlpR6ea+UXTHdt9Xujq1Sc+f11fUDaWRwVXGRG9Cr++ypK4LXvlPqJ5tmWx6Etwj:M5cHjhv1by11RaWWsMrv4r5Tqij
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77b9df4f857a8b207be9eaca43f3b85b_JaffaCakes118
Files
-
77b9df4f857a8b207be9eaca43f3b85b_JaffaCakes118.exe windows:5 windows x86 arch:x86
7bc90cc6e0fa09757bc444b76be8e4fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
GetOEMCP
GetCPInfo
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExW
RtlUnwind
OutputDebugStringW
HeapAlloc
HeapReAlloc
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
GetStringTypeW
GetLocaleInfoW
CompareStringW
WideCharToMultiByte
FindNextFileW
FindFirstFileW
GetTempPathW
CreateProcessW
lstrcmpiW
GetLocalTime
CloseHandle
FindClose
WaitForSingleObject
InitializeCriticalSectionAndSpinCount
GetLastError
GetCurrentThreadId
FreeEnvironmentStringsW
GetProcAddress
HeapFree
HeapDestroy
VirtualAlloc
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetStartupInfoW
DeleteCriticalSection
GetCommandLineW
SetLastError
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
GetProcessHeap
GetStdHandle
GetFileType
CreateFileW
shlwapi
StrChrW
StrChrIW
AssocQueryStringW
AssocCreate
SHDeleteKeyW
UrlIsW
PathStripPathW
PathSkipRootW
PathRemoveExtensionW
PathRemoveBlanksW
PathRemoveBackslashW
PathIsRootW
PathIsDirectoryW
PathGetDriveNumberW
PathFindNextComponentW
PathFindFileNameW
PathCombineW
PathAppendW
SHStrDupW
StrTrimW
StrToIntW
StrDupW
ole32
CoTaskMemRealloc
CLSIDFromString
comctl32
CreatePropertySheetPageW
PropertySheetW
ord17
InitCommonControlsEx
ImageList_Destroy
ImageList_Add
ImageList_ReplaceIcon
ImageList_SetOverlayImage
ImageList_Draw
ImageList_Remove
ImageList_LoadImageW
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_SetDragCursorImage
ImageList_GetDragImage
ImageList_Write
CreateToolbarEx
FlatSB_GetScrollPos
FlatSB_SetScrollProp
DestroyPropertySheetPage
crypt32
CryptEncodeObject
CryptFindOIDInfo
CryptEnumOIDInfo
CryptMsgClose
CryptMsgUpdate
CryptMsgGetParam
CertCloseStore
CertAddEncodedCertificateToStore
CertAddStoreToCollection
CertGetEnhancedKeyUsage
CertVerifyTimeValidity
CertFindExtension
CryptAcquireCertificatePrivateKey
CryptHashPublicKeyInfo
CertNameToStrW
CertGetNameStringW
CryptQueryObject
CryptProtectData
CertFreeCertificateChain
CertVerifyCertificateChainPolicy
CryptBinaryToStringW
CryptEncodeObjectEx
CertGetCertificateChain
oleaut32
CreateErrorInfo
GetErrorInfo
SetErrorInfo
RegisterTypeLi
LoadTypeLi
VarNot
VarBstrFromCy
VarCyFromStr
VarDateFromStr
VarR8FromStr
VarI4FromStr
VariantChangeTypeEx
VariantCopy
VariantClear
VariantInit
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayRedim
SafeArrayCreate
mpr
WNetGetConnectionW
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 204KB - Virtual size: 6.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.7e7rn Size: 310KB - Virtual size: 310KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.0wts84 Size: 274KB - Virtual size: 274KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ