Static task
static1
Behavioral task
behavioral1
Sample
77fea1f0d4e665a7af200c7cf63281a8_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
77fea1f0d4e665a7af200c7cf63281a8_JaffaCakes118
-
Size
128KB
-
MD5
77fea1f0d4e665a7af200c7cf63281a8
-
SHA1
1001cd7381f0c4da8033fb83bc52fa75a7961675
-
SHA256
7b19b5a7486f7cdb9aa9ca1771bd07d59096b4e10a31ff7c4166db35e9d74ead
-
SHA512
ac5ed3c577157d68c7cae734356d3e068edd7807dd35ebc6114d323d60f49b51c71c339ae0a2fd624e96d1bdb6e6901319258875fb1b92edd319c76cb8adf95c
-
SSDEEP
1536:5tDTHKJV/CPvq5ld2PJ6dDCyaAPR8IC2DJ7a2YerEh6xtREVeosF8dwrxzg:XTCV/ivcdQJ8CyagxN7xNptREHe8d/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77fea1f0d4e665a7af200c7cf63281a8_JaffaCakes118
Files
-
77fea1f0d4e665a7af200c7cf63281a8_JaffaCakes118.exe windows:6 windows x86 arch:x86
f9c787f9edf13764dc69bf7ebbb95587
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
PrivacySetZonePreferenceW
PrivacyGetZonePreferenceW
kernel32
GetDynamicTimeZoneInformation
SetConsoleHistoryInfo
GetCurrentProcess
GetProcessId
GetCommandLineW
GetConsoleProcessList
SwitchToThread
winscard
SCardGetProviderIdW
oleaut32
VarBoolFromR4
winmm
PlaySoundA
midiStreamProperty
gdi32
EndDoc
rpcrt4
RpcMgmtEpEltInqBegin
advapi32
GetSecurityDescriptorGroup
ObjectCloseAuditAlarmA
ole32
ReleaseStgMedium
user32
EmptyClipboard
GetWindowThreadProcessId
GetAsyncKeyState
GetScrollPos
FindWindowExA
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.yb Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CODE Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 912B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ