Static task
static1
Behavioral task
behavioral1
Sample
78e6ef54e5b9e8d22438a2cf6ac51971_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
78e6ef54e5b9e8d22438a2cf6ac51971_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
78e6ef54e5b9e8d22438a2cf6ac51971_JaffaCakes118
-
Size
5.8MB
-
MD5
78e6ef54e5b9e8d22438a2cf6ac51971
-
SHA1
a080912fbc36c78b2f472c6ad79a11136c3a6f97
-
SHA256
6158061347ef26e503f1ce3c442852d2d971cd2beac242e1b6af4c3a3c33d80f
-
SHA512
c7b92f4664dbada549745f2b68d9ade3a49b736da043a219e42c6f0b94c3aec35bc0955bbc7725499bd7b693f6a9e96e160241e50b0125243fa6f209dd2729f2
-
SSDEEP
98304:PUQThSNLIhY40u0WaFgIU2CsbsKsiG5yNqGcxUeV/RTBL5F1UWMKRF3XIspRl:PUQSN0N0u099ZvG5tx3VzLRaKRFospb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78e6ef54e5b9e8d22438a2cf6ac51971_JaffaCakes118
Files
-
78e6ef54e5b9e8d22438a2cf6ac51971_JaffaCakes118.exe windows:4 windows x86 arch:x86
6a88a0ce6393c12f6b398f296277f884
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
SafeArrayPutElement
SetErrorInfo
LoadTypeLibEx
SafeArrayCreate
VariantChangeType
SafeArrayUnaccessData
kernel32
GetSystemTimeAsFileTime
FillConsoleOutputCharacterA
LoadLibraryExA
ExpandEnvironmentStringsW
GetUserDefaultLCID
_lclose
GetLogicalDriveStringsA
ExitProcess
GetVersion
GetSystemTime
GetUserDefaultLangID
GetLargestConsoleWindowSize
WritePrivateProfileStructA
GetLocaleInfoW
GetProcessHeap
EnumResourceNamesW
Beep
GetProfileIntA
GlobalAddAtomW
GetEnvironmentVariableW
DeleteCriticalSection
FlushConsoleInputBuffer
GlobalReAlloc
GetSystemDefaultLangID
CompareStringW
EnumSystemCodePagesA
OutputDebugStringA
GetTapeParameters
GlobalGetAtomNameW
FindNextChangeNotification
VirtualProtect
WriteConsoleOutputW
ConnectNamedPipe
SetConsoleWindowInfo
ole32
CLSIDFromString
CoGetTreatAsClass
OleCreate
CoResumeClassObjects
user32
UnionRect
DispatchMessageW
CheckMenuRadioItem
FindWindowA
GetScrollInfo
wvsprintfA
UnregisterClassA
UnhookWindowsHook
DrawIcon
CallNextHookEx
GetWindowThreadProcessId
SetRect
wsprintfW
GetActiveWindow
msvcrt
fputwc
wcslen
isalnum
_ultow
_stricoll
rewind
wcstoul
setbuf
_sleep
wcstok
_mbschr
fgetc
iswascii
_flushall
qsort
Sections
.text Size: 3KB - Virtual size: 223KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5.4MB - Virtual size: 5.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ