Static task
static1
Behavioral task
behavioral1
Sample
77b1ea1813e7f94a7ba50ce09e6fddc8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
77b1ea1813e7f94a7ba50ce09e6fddc8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
77b1ea1813e7f94a7ba50ce09e6fddc8_JaffaCakes118
-
Size
634KB
-
MD5
77b1ea1813e7f94a7ba50ce09e6fddc8
-
SHA1
44921d5fdb0971e6782314050b9c282b6b9e83a4
-
SHA256
21bca86c2419f1b65763b23d1ac7a505e7161573d15d46e3523ff11d6edfef64
-
SHA512
d88df43ddec0dac82cf415672d23b43328cbc51033b319c735d392db7f3c735d6373a1a205156ac80e8d70bf59d39f8d9bc9823a2eb4630c4390234376b2b2b8
-
SSDEEP
12288:t/XyZ9OB1+rvybfo7LMarxx0mMlUBd8T6+o/jxUSGh/DzZc:t/mqvfygc8uBE6+OjaQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77b1ea1813e7f94a7ba50ce09e6fddc8_JaffaCakes118
Files
-
77b1ea1813e7f94a7ba50ce09e6fddc8_JaffaCakes118.exe windows:4 windows x86 arch:x86
980d589487bfb153cc6b411b9817455f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAddAtomA
GetLogicalDrives
RaiseException
EnterCriticalSection
GetACP
GetCommandLineA
LockResource
GlobalAddAtomA
GetLastError
CloseHandle
SetErrorMode
HeapCreate
InterlockedExchange
VirtualProtect
GetFileAttributesExA
Sleep
GetSystemDirectoryA
GetLocaleInfoA
GetStdHandle
GlobalFree
LoadLibraryExA
user32
GetWindow
FlashWindowEx
SetForegroundWindow
ShowWindow
DrawTextA
FillRect
wsprintfA
IsIconic
GetClassNameA
EndPaint
GetFocus
ValidateRect
GetWindowTextA
FrameRect
ReleaseDC
GetParent
BeginPaint
GetActiveWindow
GetCursorPos
httpapi
HttpCreateHttpHandle
HttpTerminate
HttpInitialize
HttpAddFragmentToCache
HttpAddUrl
winhttp
WinHttpOpen
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ