Static task
static1
Behavioral task
behavioral1
Sample
077c8320c24f72b9856367ac5c79d490_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
077c8320c24f72b9856367ac5c79d490_JaffaCakes118
-
Size
793KB
-
MD5
077c8320c24f72b9856367ac5c79d490
-
SHA1
750d868032faf687d40a26df47344aa8ed4aa6f6
-
SHA256
d580e55bd0523448fd907185070d3d828c211bf1a8c19ddc58793341bc0e2281
-
SHA512
1f5e3abb4799dc3a4e863b033fbd7800dd04457a0832aeaa867e0f3b3830b853dabec30de2b168063be28f3a9197d9c8d999de0fff90e31f758bc91f88af2dbe
-
SSDEEP
12288:DwnX9z+6VPIG6H2Rneu7W329yDzHLRTJXqtwzHB5yE5Tm2rGFJsqh1OSZ:D+y6aGQWEIezlTt7zHB4E5TmAOqqL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 077c8320c24f72b9856367ac5c79d490_JaffaCakes118
Files
-
077c8320c24f72b9856367ac5c79d490_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9db05ec11f0974d7ba2f72a1a62b531
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
WriteConsoleA
SetLastError
CreateDirectoryW
GlobalFree
SetLastError
HeapSize
CreateHardLinkA
DeleteFileA
CreateMutexA
GetLocalTime
GetStartupInfoA
GetFileAttributesW
LoadLibraryA
VirtualProtectEx
GetTickCount
lstrlenA
CreateSemaphoreA
SetEvent
CloseHandle
GetProcessHeap
cryptui
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
w32topl
ToplEdgeCreate
ToplEdgeDestroy
ToplEdgeFree
ToplEdgeInit
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 785KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE