Static task
static1
Behavioral task
behavioral1
Sample
77f6ed024893f9476d575cdb542d1dfe_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
77f6ed024893f9476d575cdb542d1dfe_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
77f6ed024893f9476d575cdb542d1dfe_JaffaCakes118
-
Size
278KB
-
MD5
77f6ed024893f9476d575cdb542d1dfe
-
SHA1
2b2a7accd397f31be66d616007f1b25c1e6c5649
-
SHA256
b16b6d5a80cc32b3fce1b398fa4e2e5adf2439630f665befadee3ee4b9f90fe3
-
SHA512
a6d1994434169886f78379748a36797b40523ffbd7e196f9d677e9dcfdc985f3347b7402e544d9f5f615523543f9a921a180fa8b15fa9902c4c767d9e18a6ff5
-
SSDEEP
6144:9IJxXDdmC+IkVOje3reitQZVEMyzHIf9i6HSjcdCHuU:WfzdmCmzTtQZfyzoFhyjcdCp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77f6ed024893f9476d575cdb542d1dfe_JaffaCakes118
Files
-
77f6ed024893f9476d575cdb542d1dfe_JaffaCakes118.exe windows:5 windows x86 arch:x86
862e3f02cf1a6b37dbfba48306ad18aa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExA
RegOpenKeyExW
user32
GetNextDlgTabItem
SetScrollPos
EnumDisplaySettingsA
GetTopWindow
RemoveMenu
GetSysColorBrush
SendDlgItemMessageA
SetParent
GetWindowThreadProcessId
IsWindowEnabled
BringWindowToTop
CreateDialogIndirectParamA
GetClientRect
MessageBeep
PostMessageA
IsDlgButtonChecked
CheckDlgButton
GetForegroundWindow
GetKeyboardLayout
FindWindowA
PostMessageW
OffsetRect
SetCursorPos
GetWindowTextLengthA
GetDlgItem
RegisterClassExA
CallWindowProcW
RegisterWindowMessageA
SetWindowLongA
FrameRect
DrawIconEx
SetClassLongA
kernel32
SetProcessWorkingSetSize
IsBadWritePtr
FreeLibrary
OutputDebugStringW
GlobalAlloc
SetCurrentDirectoryW
ResetEvent
IsDBCSLeadByteEx
GetCurrentThreadId
SetEvent
WaitForMultipleObjects
InterlockedDecrement
GlobalFree
VirtualFree
GetOEMCP
SearchPathW
TlsAlloc
SleepEx
GetTimeFormatA
GetPriorityClass
GetDriveTypeA
InitializeCriticalSection
GetTempFileNameA
GetFileType
WaitForSingleObject
GetModuleFileNameW
FileTimeToDosDateTime
GetACP
ole32
OleIsRunning
OleInitialize
CoTreatAsClass
CLSIDFromString
GetRunningObjectTable
ReleaseStgMedium
SetConvertStg
StgCreateDocfile
OleRegEnumFormatEtc
CreateILockBytesOnHGlobal
OleSetMenuDescriptor
OleCreateMenuDescriptor
DoDragDrop
ntdll
RtlCancelTimer
RtlInitUnicodeString
NtCreateMutant
ZwProtectVirtualMemory
NtSetSystemInformation
ZwSetEvent
RtlFillMemory
NtQueryInformationFile
gdi32
CreateDIBSection
ExtCreatePen
SetROP2
IntersectClipRect
StretchBlt
SetDIBColorTable
RealizePalette
StartPage
DPtoLP
SetViewportOrgEx
kbduncui
_Cosh
_FDscale
_Rteps
_LExp
_Strcoll
_Stod
_Mbrtowc
_Strxfrm
_FExp
_LInf
_Getctype
Sections
.text Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ