Static task
static1
Behavioral task
behavioral1
Sample
0f77b1f347924e7c4d8e6da68020170b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f77b1f347924e7c4d8e6da68020170b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0f77b1f347924e7c4d8e6da68020170b_JaffaCakes118
-
Size
148KB
-
MD5
0f77b1f347924e7c4d8e6da68020170b
-
SHA1
a8e87e4f76cbf9d9952173b3d2081d510203485b
-
SHA256
7912af8c97840000d1efa1470c816f5ebf500d46f6e13bac53904e6f2778a652
-
SHA512
016b2993fc70c0607f4cda09a5a22bf66844730790e1117f25b0316f6a868da13924363b930904005dc7af700ae7d8507455a1cb13a662aa6b4bd6f01afa797f
-
SSDEEP
3072:VjLFevyaSa+oJNloWW9zXYqiet+PS/S+foAjzPdcwU9uZ:vevaa+wlCbt+kNfIhu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f77b1f347924e7c4d8e6da68020170b_JaffaCakes118
Files
-
0f77b1f347924e7c4d8e6da68020170b_JaffaCakes118.exe windows:5 windows x86 arch:x86
40b703db2359b35ad251c2f67458d5ea
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetModuleHandleA
HeapAlloc
GetProcAddress
user32
GetForegroundWindow
GetKeyboardLayout
GetMenu
GetMenuState
GetSubMenu
GetSystemMetrics
GetWindowLongW
IsClipboardFormatAvailable
GetFocus
LoadIconW
MessageBeep
MessageBoxW
OpenClipboard
PostMessageW
RegisterClassExW
SendMessageW
SetActiveWindow
SetWindowTextW
TranslateAcceleratorW
TranslateMessage
wsprintfW
GetDesktopWindow
EnableMenuItem
DrawTextExW
DispatchMessageW
DestroyWindow
DefWindowProcW
CloseClipboard
CheckMenuItem
CharNextW
IsIconic
comdlg32
CommDlgExtendedError
FindTextW
GetFileTitleW
GetOpenFileNameW
ReplaceTextW
PrintDlgExW
PageSetupDlgW
GetSaveFileNameW
ChooseFontW
msvcrt
abs
Sections
.text Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
unit1 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
unit2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
unit3 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
unit4 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
unit5 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 854B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ