Static task
static1
Behavioral task
behavioral1
Sample
773b7c24e6027cbc3f558e2f8faed5a2_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
773b7c24e6027cbc3f558e2f8faed5a2_JaffaCakes118
-
Size
224KB
-
MD5
773b7c24e6027cbc3f558e2f8faed5a2
-
SHA1
d63b3f401a7108df0eafc7d3cb02ac5ce7b44b9f
-
SHA256
4e3abaa09d9c60005bd2975f429c28b3384011471bb865deb1b5e8894b16a758
-
SHA512
00f784cf269d39bbbca9aa5c3ec6ba50f0ae0c9236e1efec0092b0cc8593a9d2e799bcadf5c4f204be4ab3f2033cc5fc027e65c2eaa18546d51a09eee0038e0a
-
SSDEEP
6144:aBViFxgvaWkfWm3WNE4/U69pa2s1+4VycEi8LZf1k:aBVKgvaB3Addsvycwe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 773b7c24e6027cbc3f558e2f8faed5a2_JaffaCakes118
Files
-
773b7c24e6027cbc3f558e2f8faed5a2_JaffaCakes118.exe windows:4 windows x86 arch:x86
ea5434fec16ded52876bb07226cc3a66
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
VirtualAlloc
GetExitCodeThread
GetExitCodeProcess
SetEvent
OpenSemaphoreA
VirtualProtect
LoadLibraryA
GetModuleFileNameA
ReleaseMutex
GetProcAddress
GetModuleHandleA
CreateTimerQueue
GetCommandLineA
GetTempFileNameA
ResetEvent
GetTempPathA
IsBadWritePtr
VirtualFree
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
HeapSize
VirtualQuery
InterlockedExchange
RtlUnwind
HeapReAlloc
HeapAlloc
GetCPInfo
GetOEMCP
TerminateThread
GetCurrentProcessId
GetSystemInfo
GetACP
HeapFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
user32
LoadIconA
LoadCursorA
GetDesktopWindow
LoadAcceleratorsA
GetDC
GetCursorPos
ReleaseDC
CreateIcon
IsIconic
SetCursorPos
ShowWindow
GetWindowRect
SetCursor
IsWindowUnicode
PostQuitMessage
GetLastActivePopup
SetTimer
gdi32
FloodFill
psapi
GetWsChanges
EnumProcesses
msvfw32
DrawDibSetPalette
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ