Static task
static1
Behavioral task
behavioral1
Sample
77a1c2ca34f057f0a4304edffc8a9190_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
77a1c2ca34f057f0a4304edffc8a9190_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
77a1c2ca34f057f0a4304edffc8a9190_JaffaCakes118
-
Size
83KB
-
MD5
77a1c2ca34f057f0a4304edffc8a9190
-
SHA1
4499c5a6940c71a938ab1cda99aa08497b0c860e
-
SHA256
c4d88f989153f8c1da52a338b4ae8e37b3f6fb8a2661b36751b152523673b0c5
-
SHA512
0bc10d683e2fa366e0ff85a8b7c2647598c265a61c63d20ddf8240abd28d272f3967efd642fa16ad47cc703e915f8ad31357eb518434373a781ea32ab289b73d
-
SSDEEP
1536:v7WvNUnF7JY5RQDNP/WAvC/A75eBsCXKZ6JmDOeELNdy5tr1zW:ivNUF7lDNPOAvCY7cBsfck4Ndyf1C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77a1c2ca34f057f0a4304edffc8a9190_JaffaCakes118
Files
-
77a1c2ca34f057f0a4304edffc8a9190_JaffaCakes118.exe windows:5 windows x86 arch:x86
db083416172049938376828eeed7af51
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentConsoleFont
GetCommandLineA
UpdateResourceA
OpenWaitableTimerA
SetConsoleNumberOfCommandsA
CreateDirectoryA
GetDiskFreeSpaceExA
GetTempPathA
HeapAlloc
VirtualAlloc
GetThreadLocale
MultiByteToWideChar
FindFirstVolumeW
GetCommState
GetConsoleAliasesLengthW
LocalHandle
user32
EndDialog
RealGetWindowClassA
SetWindowsHookExA
EnumChildWindows
ShowWindowAsync
GetTabbedTextExtentA
DragObject
BringWindowToTop
GetWindow
LockWindowStation
GetUserObjectSecurity
DestroyWindow
CountClipboardFormats
MapVirtualKeyA
GetProcessWindowStation
GetClassWord
InternalGetWindowText
FlashWindow
SetScrollInfo
DeferWindowPos
GetUserObjectSecurity
CountClipboardFormats
EndPaint
IsHungAppWindow
SetMenu
ImpersonateDdeClientWindow
DestroyCursor
SetWindowTextA
GetWindowLongA
GetKeyboardLayout
MonitorFromPoint
InvertRect
CalcMenuBar
EnumDesktopWindows
LoadAcceleratorsA
GetNextDlgTabItem
GetWindowInfo
comdlg32
GetOpenFileNameA
Sections
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ