Static task
static1
Behavioral task
behavioral1
Sample
77b417e908b90f52e815bb56e110898a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
77b417e908b90f52e815bb56e110898a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
77b417e908b90f52e815bb56e110898a_JaffaCakes118
-
Size
28KB
-
MD5
77b417e908b90f52e815bb56e110898a
-
SHA1
12c36df5500069c4c03312548f48a002a680b179
-
SHA256
43916280a6ea10b03d7842b261143198b53ba0100d89e14aa6537382bab416d3
-
SHA512
14ed6688817c072fb7703df34b7c667e6c3af39800976b75d37dad01bea7a5e09286f086c6528a7e1b90e31a91e337294ebbfe6d323f80290799652328874f02
-
SSDEEP
192:rBW+eVNxM/tDbWeeArbcihsgjshHDAamXf84xJ:rDVDbWeVrwgsgjshHDAamXf84H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77b417e908b90f52e815bb56e110898a_JaffaCakes118
Files
-
77b417e908b90f52e815bb56e110898a_JaffaCakes118.exe windows:4 windows x86 arch:x86
0957287b16f4d58ba4d8c06063bbd080
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
GetModuleHandleW
Sleep
GetLastError
MoveFileW
GetSystemTimeAsFileTime
DeleteFileW
lstrcpyW
lstrlenW
GetEnvironmentVariableW
lstrcmpA
lstrlenA
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingW
VirtualFree
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
HeapFree
FreeLibrary
HeapAlloc
GetProcessHeap
LoadLibraryW
MapViewOfFileEx
UnmapViewOfFile
ReadFile
SetFilePointer
ExitProcess
FormatMessageA
SetEnvironmentVariableW
GetFileSize
CreateFileW
WideCharToMultiByte
lstrcpynW
user32
MessageBoxA
wsprintfW
Sections
.text Size: 24KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE