Static task
static1
Behavioral task
behavioral1
Sample
77e51b7fa83595cf39456c3a162a4128_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
77e51b7fa83595cf39456c3a162a4128_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
77e51b7fa83595cf39456c3a162a4128_JaffaCakes118
-
Size
167KB
-
MD5
77e51b7fa83595cf39456c3a162a4128
-
SHA1
7c73b30d51a2969cc37b069c34ecefc11bde9c67
-
SHA256
3e8e4989ef8a5d1b78bd13057bdb7b479b7d5491d72ead5ce4220eba3ff4d068
-
SHA512
da0b9c71bef360edafd198d2d4f37d4d908db154f831c0f6601b949e6ef312ea01ed257c3aaed611e0fcd5ee1620a43c87540d76d344748457a55ab034d47350
-
SSDEEP
3072:hJ86TLV2El1n95fG4Z+QgZKPfjPL0BNjR5ZWvdEpKo0c:h+6TLbl5/fG7WfDLM+vdEDf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77e51b7fa83595cf39456c3a162a4128_JaffaCakes118
Files
-
77e51b7fa83595cf39456c3a162a4128_JaffaCakes118.exe windows:5 windows x86 arch:x86
2be373ca9cb1b326d6ac9ae1771e2f71
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
GetDefaultCommConfigW
LoadResource
HeapAlloc
ClearCommError
GetQueuedCompletionStatus
SetConsoleTextAttribute
FindFirstFileExW
GetTickCount
ReadConsoleW
GetWindowsDirectoryA
GetProcessTimes
WideCharToMultiByte
EnumSystemCodePagesA
FindNextVolumeW
SetConsoleCursorPosition
GetAtomNameW
GetEnvironmentVariableA
IsBadStringPtrW
GetLastError
GetProcAddress
SetVolumeLabelW
GetPrivateProfileStringA
LoadLibraryA
GetProcessWorkingSetSize
LocalAlloc
SetCalendarInfoW
BuildCommDCBAndTimeoutsW
GetModuleFileNameA
FindFirstVolumeMountPointA
WTSGetActiveConsoleSessionId
OpenFileMappingW
ResetWriteWatch
AreFileApisANSI
CreateFileA
CompareStringW
GetVolumeNameForVolumeMountPointA
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
HeapFree
SetFilePointer
CloseHandle
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
VirtualAlloc
HeapReAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetModuleHandleA
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
ReadFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
user32
GetCursorInfo
advapi32
RegQueryMultipleValuesW
Sections
.text Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 699KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ