Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_77f3765e6d7f91f091178fd1536318e0.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_77f3765e6d7f91f091178fd1536318e0.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_77f3765e6d7f91f091178fd1536318e0
-
Size
127KB
-
MD5
77f3765e6d7f91f091178fd1536318e0
-
SHA1
44513ff5cea6e81ba7b1171a48b5f07ace6f8e3d
-
SHA256
268cf98e2a6cec7d2e5968b76038ce1fe11291b3d63e3bff82f563b0bbee7e42
-
SHA512
1869a5e8f33c497092465e6d46b4217da08e140cb1c2d65f03922badd7a6c95ed096013698ac21a3918266cce56a336a7ecec6ba1aa3ebf4cd71abba224416c6
-
SSDEEP
3072:a2j2Qvnzwb19P6CDdlvUD2EfewGYGE1qIl/oquldsipV88y:Lxe9PFtUKEWwGQ1qIlzuldi8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_77f3765e6d7f91f091178fd1536318e0
Files
-
JaffaCakes118_77f3765e6d7f91f091178fd1536318e0.exe windows:4 windows x86 arch:x86
9c6d398fca1d6b556b4df56dabbbb031
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcatA
InitializeCriticalSection
lstrcpyA
FindResourceA
GetFileSize
ReadFile
CloseHandle
GetLastError
SetFileTime
GetStartupInfoW
FormatMessageW
IsBadWritePtr
GetLocalTime
LeaveCriticalSection
GetModuleHandleA
SetFileAttributesW
CreateMutexW
GetCurrentDirectoryW
HeapCreate
SetFileTime
SetFileTime
msi
MsiAdvertiseProductA
MsiCloseHandle
MsiCreateRecord
MsiCloseAllHandles
user32
wsprintfW
GetWindowLongW
SetFocus
LoadCursorW
PostMessageW
GetWindowRect
GetWindowTextA
IsDialogMessageA
PeekMessageW
IsZoomed
IsWindow
DispatchMessageA
SetCursorPos
wldap32
ldap_add
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 1024B - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 129B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE