Static task
static1
Behavioral task
behavioral1
Sample
28ac8d48c87e076fac13bd5e822c2823_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
28ac8d48c87e076fac13bd5e822c2823_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
28ac8d48c87e076fac13bd5e822c2823_JaffaCakes118
-
Size
1.2MB
-
MD5
28ac8d48c87e076fac13bd5e822c2823
-
SHA1
ee3b5608f0d29f3b2580a615ee9819d27a2d166e
-
SHA256
cc70534118591553e37e54ac8e83757325b9a75d80d12972a2eab2f9e95ed68a
-
SHA512
f3eec3787aad311600ae1995dbc19d743a53a83350bccd9b18c43322b2982593777cdda1b8aa14a921d837758c94ef9c65a40ffbcb1c259cc130901cc47bf872
-
SSDEEP
24576:XG08QxY+fZzmi/i5dODu3nSw704/zX0MZZ2r5VWgZQy0joH:WzSoi/i5EK/+7WD1joH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28ac8d48c87e076fac13bd5e822c2823_JaffaCakes118
Files
-
28ac8d48c87e076fac13bd5e822c2823_JaffaCakes118.exe windows:4 windows x86 arch:x86
e0985ecfcd63548da8927131dcd4d245
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CopyRect
CreateIcon
AlignRects
DrawTextW
DialogBoxParamA
IsMenu
GetCursor
EndDialog
GetWindowTextLengthA
CalcMenuBar
DrawIconEx
DrawIcon
GetDC
IsWindow
GetWindowTextA
AppendMenuW
DrawTextA
DialogBoxParamW
CloseWindow
CopyImage
GetMenu
BlockInput
AppendMenuA
GetFocus
kernel32
OpenFileMappingA
GetLastError
WriteFile
GetComputerNameA
CreateThread
GetStdHandle
ReadConsoleA
ReadFile
CreateProcessA
CopyFileA
DeleteAtom
FindAtomA
CopyFileW
GetCPInfo
CreateDirectoryA
GetConsoleMode
GetFileSize
GlobalFree
DeleteFileW
DeleteFileA
FindFirstFileA
SetLastError
Sleep
CopyFileExA
comctl32
ImageList_ReplaceIcon
ImageList_Replace
ImageList_EndDrag
ImageList_AddIcon
ImageList_LoadImage
ImageList_GetImageCount
ImageList_DrawIndirect
ImageList_DragShowNolock
ImageList_DragMove
ImageList_Read
ImageList_BeginDrag
ImageList_DragEnter
ImageList_GetIconSize
ImageList_Remove
ImageList_GetIcon
ImageList_GetDragImage
ImageList_DragLeave
ImageList_LoadImageW
ImageList_GetImageRect
ImageList_LoadImageA
ImageList_Create
ImageList_DrawEx
ImageList_AddMasked
advapi32
RegQueryValueExA
RegCreateKeyExA
RegDeleteValueW
RegEnumValueA
RegOpenKeyW
RegEnumValueW
RegQueryValueExW
RegGetKeySecurity
RegQueryInfoKeyW
RegEnumKeyExW
RegEnumKeyW
RegDeleteKeyA
RegLoadKeyW
RegCreateKeyExW
RegOpenKeyExA
RegQueryValueA
RegEnumKeyExA
RegOpenKeyA
RegReplaceKeyA
RegFlushKey
RegQueryValueW
RegDeleteValueA
shell32
RestartDialog
CheckEscapesW
ExtractIconResInfoA
ShellAboutA
SHFindFiles
SHUpdateImageW
ExtractIconEx
FindExeDlgProc
DragAcceptFiles
ExtractIconExA
DragQueryFileAorW
SHDefExtractIconA
DragQueryFile
DragQueryFileW
CheckEscapesA
SHUpdateImageA
DragFinish
FreeIconList
DllGetVersion
SHChangeNotifyRegister
ExtractIconA
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.0MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ