Static task
static1
Behavioral task
behavioral1
Sample
28819b7bff8055c509d4368997664351_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
28819b7bff8055c509d4368997664351_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
28819b7bff8055c509d4368997664351_JaffaCakes118
-
Size
517KB
-
MD5
28819b7bff8055c509d4368997664351
-
SHA1
1db07593ed05124d39820c68e76f92fcf8f9fc2f
-
SHA256
449c6c61d3a467864fbba2451dab4ab9377fcebb66f05efd34a2d36481d62484
-
SHA512
235c806fea2dfb0d3ef74076ff54ed78705c221d8239440d47e08a1f88073e23f02d7eb4ebea37d66b2b145bdc33186bace0ae3c22b6a9847d6388d6c759ccb8
-
SSDEEP
12288:MJm2NtxWCvZtnNB+cH8ZJb59X0TauUXpcKYTh2DugMJdXZab5YI:CFNLZvZVNXsl9kAXOKY3Mb7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28819b7bff8055c509d4368997664351_JaffaCakes118
Files
-
28819b7bff8055c509d4368997664351_JaffaCakes118.exe windows:4 windows x86 arch:x86
bf80f986489ffd6a72c2083ca284faee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_GetIcon
ImageList_Remove
ImageList_ReplaceIcon
GetEffectiveClientRect
ImageList_Duplicate
ImageList_Draw
CreateToolbarEx
ImageList_DrawEx
ImageList_GetBkColor
CreatePropertySheetPageA
CreateStatusWindow
_TrackMouseEvent
CreateStatusWindowA
ImageList_DragEnter
ImageList_LoadImageW
DrawInsert
ImageList_GetImageCount
ImageList_SetFilter
CreatePropertySheetPageW
InitCommonControlsEx
ImageList_Write
CreatePropertySheetPage
DrawStatusText
ImageList_BeginDrag
kernel32
GetCommandLineA
GetOEMCP
CreatePipe
SetConsoleWindowInfo
GetFileType
HeapDestroy
FindResourceExW
GetLocaleInfoA
GetEnvironmentVariableA
GetCurrentProcessId
CreateMutexA
CreateProcessW
GetACP
GetExitCodeThread
WriteFile
SystemTimeToTzSpecificLocalTime
HeapSize
SetLastError
GetEnvironmentStringsW
FlushFileBuffers
GetSystemTimeAsFileTime
lstrcmpi
SetEnvironmentVariableA
GetModuleHandleA
EnumSystemLocalesA
GetUserDefaultLCID
CloseHandle
LCMapStringA
HeapFree
TlsGetValue
OpenFileMappingW
GetConsoleCP
DeleteCriticalSection
VirtualQuery
LeaveCriticalSection
HeapCreate
WideCharToMultiByte
GetDiskFreeSpaceExW
LCMapStringW
MultiByteToWideChar
GlobalGetAtomNameA
InterlockedExchange
VirtualAlloc
GlobalFindAtomW
GetShortPathNameA
ReadFile
GetLastError
GetLongPathNameA
CompareStringA
EnterCriticalSection
OpenMutexA
GetVersionExA
GetCurrentThread
InitializeCriticalSection
lstrlenA
SetHandleCount
SetStdHandle
TerminateProcess
IsValidLocale
IsValidCodePage
GetCPInfo
IsBadWritePtr
ExitProcess
GetLocaleInfoW
GetTickCount
GetTimeFormatA
GetProcAddress
GetStdHandle
FreeEnvironmentStringsW
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
LoadLibraryA
VirtualProtect
VirtualFree
FindFirstFileExW
QueryPerformanceCounter
GetStringTypeW
WriteConsoleOutputAttribute
GetStringTypeA
GetCurrentThreadId
GetStartupInfoA
GetEnvironmentStrings
GetWindowsDirectoryA
FreeEnvironmentStringsA
SetFilePointer
GetTimeZoneInformation
HeapReAlloc
GetDateFormatA
GetLogicalDriveStringsA
HeapAlloc
TlsSetValue
CompareStringW
GetSystemInfo
TlsAlloc
RtlUnwind
TlsFree
HeapLock
user32
SendMessageW
SetScrollInfo
MessageBoxA
SetShellWindow
CloseWindow
SwitchDesktop
GetMenuDefaultItem
SetMenuContextHelpId
SetSystemCursor
ShowWindow
DestroyWindow
InsertMenuItemW
RegisterClassA
CreateWindowExW
PtInRect
CreateIconIndirect
RegisterClassExA
LoadMenuIndirectA
EnumClipboardFormats
FindWindowA
LoadStringW
DefWindowProcW
Sections
.text Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 252KB - Virtual size: 258KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ