Static task
static1
Behavioral task
behavioral1
Sample
78b0a81695a215e8c2d710d0427875ce_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
78b0a81695a215e8c2d710d0427875ce_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
78b0a81695a215e8c2d710d0427875ce_JaffaCakes118
-
Size
636KB
-
MD5
78b0a81695a215e8c2d710d0427875ce
-
SHA1
c3747854111ce58912e02c97378e3937cf503140
-
SHA256
91bcbc59073959ae007e0a1e29d765ca147200b410caca6865ee2ff2bc85b308
-
SHA512
c57fbe5086e103a6f5c07dc919ab414b46d1789cf2c44125edb5e0520503e1e318e3bdd243b82d4eadc6f0fc5a04782d986edd9965ce517459c22c1e5d05d48e
-
SSDEEP
12288:awQBI2ox0auZK248B7xIGJ3bGNacM+oz8JGuS4wLSlFd:awAh60aiIM7x5xbMLom44wmF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78b0a81695a215e8c2d710d0427875ce_JaffaCakes118
Files
-
78b0a81695a215e8c2d710d0427875ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
6211ead2cd50b6e90d84b84d6b2e1f7e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
WaitForMultipleObjects
GetStdHandle
GetTickCount
lstrlenA
GetAtomNameA
GetCommandLineA
GetVersion
CloseHandle
GetModuleHandleA
WaitForSingleObject
GetConsoleCP
SuspendThread
InterlockedExchange
SetConsoleCP
VirtualProtect
CompareFileTime
GetSystemDefaultLangID
HeapReAlloc
SearchPathA
GlobalUnlock
user32
DispatchMessageA
CreateMenu
DialogBoxParamA
DrawCaption
InsertMenuA
MessageBoxA
IsDialogMessage
GetKeyboardLayout
SetPropA
CreateIcon
GetDlgItem
SetScrollInfo
GetKeyState
DispatchMessageA
EnableScrollBar
DestroyMenu
SetWindowPos
DragObject
InvertRect
CreateCursor
FindWindowA
GetCursorInfo
CopyImage
advapi32
RegEnumKeyA
RegCloseKey
RegQueryInfoKeyA
RegCreateKeyExA
RegEnumValueA
uxtheme
GetThemeColor
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ