Static task
static1
Behavioral task
behavioral1
Sample
c77bb4c76024b76a53ed8b15e310f8cd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c77bb4c76024b76a53ed8b15e310f8cd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c77bb4c76024b76a53ed8b15e310f8cd_JaffaCakes118
-
Size
93KB
-
MD5
c77bb4c76024b76a53ed8b15e310f8cd
-
SHA1
3738f6c37c4bdf6bf2096c886af4887817d9b0d5
-
SHA256
6b4b9859f3ce13fa2725d18c3ccdf9a9118ea81e79f7cd37f9f93c80d83c13bf
-
SHA512
4d823b9c34266939062e12eb1f2fe5cf1dfc83bbe50da8c9ca8e0516b6d491605511e006c3b5422e7c4130fca8e8a1d7faa9b7580a46ce2bbcee451603718e72
-
SSDEEP
1536:HYkmZeifsRsNmE+RZBjeTiDBMjHF3Yf6A89lZ6MZelUoC2nTnu2CwyHI:fifrNmbRZBqTSibF3N9z6MeULSnuTI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c77bb4c76024b76a53ed8b15e310f8cd_JaffaCakes118
Files
-
c77bb4c76024b76a53ed8b15e310f8cd_JaffaCakes118.exe windows:4 windows x86 arch:x86
5d5bbe6fd02136617135d9b328e77035
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyCaret
DeleteMenu
DefDlgProcA
CreateIconFromResourceEx
CopyImage
CloseWindow
CharToOemA
CharPrevA
CharLowerA
ChangeMenuA
ActivateKeyboardLayout
kernel32
GetStartupInfoA
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcmpA
lstrcatA
WriteFile
VirtualAlloc
UnmapViewOfFile
TlsSetValue
TlsGetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceTypesA
ExitProcess
FreeResource
GetLastError
GetLocalTime
GetSystemTimeAsFileTime
GetTimeFormatA
OpenFile
OpenFileMappingA
RtlUnwind
TlsFree
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE