Static task
static1
Behavioral task
behavioral1
Sample
b77f657f76f2a4dd2443bdc11909d964_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b77f657f76f2a4dd2443bdc11909d964_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b77f657f76f2a4dd2443bdc11909d964_JaffaCakes118
-
Size
743KB
-
MD5
b77f657f76f2a4dd2443bdc11909d964
-
SHA1
4741129d4644f98a8dbdcd09b2e75c4aa59cc278
-
SHA256
e19a14d523637bd8d167a9667b7de85f96a26c3d3bc3244b77d5540d9d7b6f23
-
SHA512
a0c63f58ba068e1a99c6bc8f2e53a3a008cdbe2183387d77816edd813b2c756d510ac4bb39d81afabb7a0c5d1479f2404bbff97d4596677e60ea31b5237f2ff9
-
SSDEEP
12288:t3kZ3N/IAglXYflZwiFJbO7cxMRbXqhI+N+b1YVTPs/sVmeU/vTs25w3pDZk:tOdXglYzwaU8MRWdTPPXUT75q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b77f657f76f2a4dd2443bdc11909d964_JaffaCakes118
Files
-
b77f657f76f2a4dd2443bdc11909d964_JaffaCakes118.exe windows:4 windows x86 arch:x86
b042144f8308556ae9add2652729b93f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeConsole
PulseEvent
GetVersion
SetEvent
CloseHandle
VirtualProtect
GetBinaryTypeA
ExitProcess
GetSystemTime
InterlockedExchange
lstrlenA
TlsFree
GetModuleHandleA
AddAtomA
GetACP
GetTickCount
GlobalFlags
FindResourceExA
HeapReAlloc
GetLocalTime
LoadLibraryW
user32
GetDlgItem
DispatchMessageA
GetWindowTextA
GetWindowLongA
InflateRect
TranslateMessage
LoadIconA
GetMenu
GetScrollRange
SetSysColors
CopyRect
ModifyMenuA
UpdateWindow
MessageBoxA
SetWindowPos
SetPropA
GetSubMenu
GetMenuStringA
EnableScrollBar
PostQuitMessage
ScrollDC
ShowWindow
GetKeyboardLayout
GetParent
InsertMenuA
EqualRect
PostMessageA
DestroyMenu
DialogBoxParamA
shlwapi
StrToIntA
StrTrimA
StrToIntExA
UrlHashA
UrlCombineA
clbcatq
CoRegCleanup
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ