Static task
static1
Behavioral task
behavioral1
Sample
78f625e451edf00694233be28a9ed6ee_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
78f625e451edf00694233be28a9ed6ee_JaffaCakes118
-
Size
668KB
-
MD5
78f625e451edf00694233be28a9ed6ee
-
SHA1
c7e463cb8c5f1bb054517fe97e00584950e1a081
-
SHA256
3cd191b9e8bf6b7c0850f801888be51eb151555a4a4f17b241ceddfc023912c3
-
SHA512
522bd0fcec6d93f34c889ea5d00942664743929db22037a3013cc34f5f7948fde160872cbfbaa8ead2527fe81a672e00c56054e3d042236c96cecadc30e46b23
-
SSDEEP
3072:pa325FE+kRT9mrJTNCOUb6tNAxZdAZ0kjAgkmeukhu82fQN33X5G5V7ft5H3QCDX:ZY+6ApWme/uVfs3X5GnX3QCf8yuYGB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78f625e451edf00694233be28a9ed6ee_JaffaCakes118
Files
-
78f625e451edf00694233be28a9ed6ee_JaffaCakes118.exe windows:5 windows x86 arch:x86
39930d2c72ee2c04960addfa04ebe6d1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
RpcRevertToSelfEx
RpcMgmtEpEltInqBegin
oleaut32
VarBoolFromDate
user32
BeginPaint
GetUserObjectSecurity
comctl32
ImageList_GetIconSize
netapi32
NetGroupAddUser
wininet
RetrieveUrlCacheEntryFileA
iphlpapi
GetNumberOfInterfaces
kernel32
GetModuleHandleW
WriteConsoleOutputCharacterA
GetSystemDirectoryW
SetCommConfig
GetPrivateProfileStringA
LoadResource
ntdll
towlower
ole32
HWND_UserSize
OleFlushClipboard
shlwapi
SHQueryValueExW
SHGetThreadRef
shell32
SHGetUnreadMailCountW
rasapi32
RasGetEntryPropertiesA
RasGetAutodialAddressW
advapi32
RegQueryReflectionKey
RegSaveKeyA
ObjectPrivilegeAuditAlarmA
gdi32
SetTextJustification
SetWindowOrgEx
UpdateColors
StartPage
setupapi
SetupDiGetDeviceInstallParamsW
Sections
.text Size: 596KB - Virtual size: 592KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ