Static task
static1
Behavioral task
behavioral1
Sample
28ae7e20a6bf2e0dd806452f26c8d52c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
28ae7e20a6bf2e0dd806452f26c8d52c_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28ae7e20a6bf2e0dd806452f26c8d52c_JaffaCakes118
-
Size
76KB
-
MD5
28ae7e20a6bf2e0dd806452f26c8d52c
-
SHA1
39f743dab888175d9d79af9b34a9b23fecadf621
-
SHA256
4f78437fbfe36e6434c629307a69d0585e7e104299a893e917de9d2f3720fb1b
-
SHA512
4ccd8e7fc267296c86aed93fb61fe4ddbebe28576b288ed5614f9a44a154e271d57be12c6d38fbeaacea0d1da86567dc9ea06cca4ff2046bc5ec35b6220ab634
-
SSDEEP
1536:O2Mm3SuzOqHLr7bG5ypW2tD2icJN0YUMoRCgqZ8pjVrs2ryrd1vUQuq6:F53zNLrsIWficJfoRI+Hs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28ae7e20a6bf2e0dd806452f26c8d52c_JaffaCakes118
Files
-
28ae7e20a6bf2e0dd806452f26c8d52c_JaffaCakes118.exe windows:4 windows x86 arch:x86
08e72661708531b56326c881cc80c3e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCommMask
GetFileAttributesA
DeleteCriticalSection
PeekConsoleInputW
SetWaitableTimer
LocalFileTimeToFileTime
RemoveLocalAlternateComputerNameA
EnumResourceNamesA
GetLogicalDriveStringsA
ReadProcessMemory
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE