Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_77a318d33a347083de0a7b025d83cb80.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_77a318d33a347083de0a7b025d83cb80.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_77a318d33a347083de0a7b025d83cb80
-
Size
113KB
-
MD5
77a318d33a347083de0a7b025d83cb80
-
SHA1
59a94bbf5da4a9d5f76df8e2527732e38d852341
-
SHA256
e836f79ea6b306f5062ddf0e2db0219740f89cb895172a1dcf5057e99484b9a4
-
SHA512
3f3eff57b9ef4eac91ddbec6810dd98f3669c06ba62a46e1fbb7690e9b901ba846dbf7bbb7bd7556c546d30b4080e34728fb8030dd836101dbf4ad2bb4a12979
-
SSDEEP
3072:wPUbHcqODccAeC/55X9TQ3tqwQF2v1Okw7:MUIDu75YtqvF2vY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_77a318d33a347083de0a7b025d83cb80
Files
-
JaffaCakes118_77a318d33a347083de0a7b025d83cb80.exe windows:4 windows x86 arch:x86
f566c65806422d23143db155b4b521b2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapDestroy
VirtualQuery
WriteConsoleW
CopyFileA
GetCommandLineA
GetPrivateProfileSectionW
GetDriveTypeW
VirtualProtect
WriteConsoleW
WriteConsoleW
CancelIo
lstrcpyA
lstrlenW
GetStartupInfoA
GetFileAttributesA
AddAtomW
Sleep
GetModuleHandleA
GetProcessHeap
DeleteFileA
SetEvent
mmcndmgr
DllRegisterServer
DllGetClassObject
DllRegisterServer
DllCanUnloadNow
uxtheme
CloseThemeData
GetThemeSysSize
SetWindowTheme
GetThemeTextMetrics
DrawThemeBackground
GetThemeTextExtent
CloseThemeData
IsThemeActive
GetThemeColor
GetThemeBool
DrawThemeEdge
GetWindowTheme
OpenThemeData
Sections
.text Size: 1024B - Virtual size: 819B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 83B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ